Searching and verifying at @certora

France
Joined October 2019
Yuri Tkachenko · DSS 2026 “Audits Don't End at Publication” Explore the talk and add it to your agenda: defisecuritysummit.org/2026/… Tickets: luma.com/9qtxqqxx
1
5
10
417
I’ll be there, this is too important to miss. EIP-8205 solves this problem in a very simple way, and it just doesn’t make sense to keep the current behavior. This would be a huge improvement for @LidoFinance and other staking protocols, especially from a security perspective.
This issue makes EIP-8205 even more valuable. With a reasonable pre-registration mechanism for @ethereum validators, we could have avoided that. Join ACDC #190 next Thursday to support EIP-8205 inclusion in Hegota!
2
8
324
Kevin Lotz · DSS 2026 “Formal Verification of Stake Pools: From General Design to a Real-World Application” Explore the talk and add it to your agenda: defisecuritysummit.org/2026/… Tickets: luma.com/9qtxqqxx
1
4
8
404
Replying to @AliceAndB0b
@AliceAndB0b · DSS 2026 “Proving the Spoke: Formal Verification of Aave V4’s Hub-and-Spoke Architecture” Explore the talk and add it to your agenda: defisecuritysummit.org/2026/… Tickets: luma.com/9qtxqqxx
3
1
7
789
We're hiring Only people smarter than me Roles below 👇
Come build the future of onchain finance with Kamino. We’re hiring across engineering, product, business development, marketing, legal, and operations. Explore open positions: jobs.ashbyhq.com/kamino
24
15
1
217
15,786
Thanks for having me @yAuditDAO ! (And especially @devtooligan for suggesting I give a talk). From alumni to speaker, I'm happy to have been able to give back. I highly recommend watching it, if i may say so myself. Lots of gifts in this. Slides: thinking-like-an-attacker.ne…
yBorg - Week 3 Day 2 Today’s speaker: @BowTiedDravee on “Thinking Like an Attacker.” Use attack trees: start with the goal, work backward, and challenge assumptions until attacker control reaches something breakable. 🌶️ Hot take: AI is a gun. You still need to aim. Watch 👇
3
4
1
67
2,569
Native Bitcoin collateral coming to Aave. Borrow stablecoins against BTC. powered by @babylonlabs_io.
Today, we published an ARFC on the @aave governance forum to propose native Bitcoin to Aave V4 as collateral through Babylon Trustless Bitcoin Vaults (TBV). The proposal includes two new Aave V4 Spokes; Babylon Spoke and BTCVault Swap Spoke for borrowing and liquidation settlement, revenue sharing terms and AAVE, BABY buybacks. If approved and implemented, Bitcoin holders can lock their native Bitcoin on the Bitcoin chain self-custodially, and use it as collateral to borrow supported assets on Aave V4, without wrapping, bridging, tri-party escrow, or sending their Bitcoin to third parties. Risk parameters for both Spokes will be provided by Aave's risk service providers. Subject to Aave governance review and approval. governance.aave.com/t/arfc-o…
43
29
12
356
15,948
our team found this nice bug during one of our zero knowledge audits. a very interesting read, and quite a story. we reported it to Consensys, they confirmed the issue, and we started identifying downstream projects. happy to see everything handled so well. special kudos to the @Consensys team for their quick responses and responsiveness, and huge thanks to @_SEAL_Org for the super quick response, and to @pcaversaccio for the great advice on how to proceed given the situation certora.com/blog/take-no-hin…
2
12
1
86
3,754
llill retweeted
On September 24, forged zero-knowledge proofs took ~$1.92M in USDC from Payy's bridge. The fix for the Barretenberg verifier bug Payy blames had been in a public release for 73 days. Find out why Payy was still exposed ⬇️ certora.com/blog/payy-exploi…
1
3
31
1,353
llill retweeted
Lido Lend: Security-First Lending Lido contributors are unveiling the development of ‘Lido Lend’, a new decentralized lending market, designed with a novel set of security-forward safeguards and utilities that benefit both lenders and borrowers. research.lido.fi/t/unveiling…
42
70
33
437
83,356
Introducing Polymarket Protocol V2, a new smart-contract foundation built for prediction markets. To give developers and market makers time to integrate, we’re running canary markets October 5–30, with new markets tentatively switching on November 2. With this release, we’re also introducing Data API v2, a new Rust service powered by our in-house on-chain indexer Start with the migration docs here: poly.market/v2-migration Read more about both in the blog below:
23
27
17
346
47,278
Introducing Polymarket Protocol V2
67
50
48
392
102,275
llill retweeted
An audit, a fuzzing run, and a formal proof do different things. Our new guide compares what each one catches, what a clean result actually tells you, and where its guarantees stop. Second in our formal verification series for the people who approve the budget and carry the risk. certora.com/blog/formal-veri…
1
5
1
32
1,376
llill retweeted
Disappointed by the European Central Bank’s (ECB) and European Banking Authority’s (EBA) responses to the MiCA consultation. They are not only advocating for a prohibition on paying yield on stablecoins, but also for restrictions on CASPs providing access to DeFi, including protocols offering yield on non-MiCA-authorized stablecoins, without providing a clear framework for how access to DeFi should work in practice. They also suggest that CASPs offering access to DeFi should restrict it to certain groups of users through so-called “suitability tests,” alongside a potential certification regime for DeFi lending protocols. It is unclear how these requirements would work in practice. If regulators determine which protocols are deemed suitable for European users, the result risks looking very different from the open DeFi that exists today. Instead, we could end up with more walled gardens that undermine the liquidity and network effects of open financial networks, ultimately limiting Europeans’ ability to access new ways to grow and preserve wealth. These proposals are presented as measures to “protect consumers.” But excessive restrictions can instead create more friction for innovation and slow the development of open, transparent, and auditable financial infrastructure that can benefit consumers. The reality is that onchain finance, including stablecoins, DeFi, and tokenized securities, has the potential to reshape financial infrastructure by reducing friction, increasing transparency, and expanding access to financial opportunities. European consumers and businesses stand to benefit significantly from this transformation, particularly if the companies building this infrastructure can continue to build and compete from within Europe. Meanwhile, U.S. regulators, including the SEC and CFTC, have increasingly taken a more pragmatic approach toward enabling onchain financial innovation. European regulators should put users and their interests at the center of the framework. Banks and other incumbents should be able to adapt their businesses to serve users in an increasingly onchain economy, rather than relying on artificial restrictions that risk increasing costs and reducing access for Europeans as the rest of the world moves onchain. DeFi will win.
128
143
37
1,106
170,385
Replying to @Certora
@Certora recently launched their newest AI Auditor, and we wanted to try it out. When tested against a codebase our engineers developed, it surfaced a unique vulnerability two rounds of audits missed!! Let's dive in.
6
3
6
40
8,933
llill retweeted
murk closed beta is now live. Users can trade, earn, borrow, and more while keeping their onchain activity private. Learn more 👉 t.me/murkfinance
5
6
4
37
5,550
Didn't see this on the timeline so ... supply chain attack on Rust arrayref - check this if you synchronized something today blog.rust-lang.org/2026/08/2…
7
19
928
llill retweeted
Learn how Murk keeps your financial activity private while letting you keep using the apps you already know. Our docs are now live. 👉 docs.murk.finance
2
5
1
15
453
llill retweeted
We've formally verified @aave's Stable Vaults, the smart contract vaults that power stablecoin yield in the Aave App and are now available for any business to build on. Stable Vaults convert variable onchain lending rates into a stable rate that businesses can offer their users. Our verification focused on money-critical accounting and interest-rate properties. Here are some details 🧵
2
5
48
3,975
llill retweeted
Aviation got safe by assuming aircrafts could fail. Plane systems might break, so critical systems are duplicated and no single failure is allowed to matter. Balancer V3 security works the same way, in four different layers. 🧵
5
6
3
36
7,283