Business Development & Strategic Partnerships. Web3 - Security -Enterprise @nethermind. Building Ethereum & Agentic AI projects @NethermindSec
San Francisco.
Joined August 2010
- Tweets126
- Following492
- Followers113
- Likes360
Comi Roa retweeted
If you run Nethermind on Hoodi, upgrade to 2.2.1 before 26 Oct.
On today’s All Core Devs call, client teams postponed the Glamsterdam fork on Hoodi to review a change to its specification. A new date will follow.
Meanwhile, upgrade your Hoodi node now: github.com/NethermindEth/net…
Comi Roa retweeted
Only 2 days left to apply for the final pilot cohort of the Ethereum Security Subsidy Program!
📥 Apply here -> areta.fillout.com/t/bFJzDt3p…
Comi Roa retweeted
We're excited to welcome @Nethermind as a Devcon 8 supporter!
From maintaining one of Ethereum’s most widely used execution clients to advancing protocol security, Nethermind helps build & strengthen the infra the ecosystem relies on.
See you in Mumbai, Nethermind community!
Comi Roa retweeted
Stabilizer has completed an independent security review with @NethermindSec.
A complete review of the protocol's contracts, with all findings addressed and re-verified.
More details → stabilizer.finance/ecosystem…
Awesome to see more teams getting the security support they need to build with confidence! 🔐
Proud to see @nethermind helping push this initiative forward alongside @ethereumfndn and @chainlinklabs.
Builders, don’t sleep on the final cohort. Get your applications in b4 Oct 14!
1/ Cohorts IV & V are officially locked in to the @ethereum Security Subsidy Program. Join us in welcoming these stellar teams!
Cohort VI will be our final cohort of the pilot, so get your applications in ahead of the Oct 14th deadline for your chance at subsidized security services from industry-leading providers.
Big thanks, as always, to our expert committee from @ethereumfndn, @nethermind, and @chainlinklabs.
Building on @arbitrum or planning to migrate from another chain? 👀
The Arbitrum Security Program is back! 🚀
Let’s get those smart contracts secured. DM me! 🔐
Building on @arbitrum or planning to migrate from another chain? 👀
The Arbitrum Security Program is back! 🚀
Let’s get those smart contracts secured. DM me! 🔐
Introducing the Arbitrum Security Program
The Arbitrum Foundation is subsidizing smart contract audits for teams building on the Arbitrum Platform including:
> apps on testnet
> projects on mainnet
> migrating from another chain
> dedicated Arbitrum chains
Get audited with the likes of @OpenZeppelin, @trailofbits, @cyfrin, @Nethermind and many more
Read more below and register today:
tally.so/r/3xzEzv?ref=blog.a…
Building on @arbitrum or planning to migrate from another chain? 👀
The Arbitrum Security Program is back! 🚀
Let’s get those smart contracts secured. DM me! 🔐
Building on Arbitrum? The Arbitrum Security Program can cover part of your audit, and we're one of its auditors again.
xitter.cf/arbitrum/status/210461…
Comi Roa retweeted
Nethermind continues doing excellent work and making Ethereum more efficient and faster.
firefly.social/post/x/210738…
Comi Roa retweeted
The mode a protocol runs in when it's most fragile is often the one it has tested least.
For @suno_finance, that's rescue mode. If the reserve behind uWatt drops below $1 per token, governance can open minting below par to bring in new capital.
In that mode the price follows the reserve. Every solar payment that lands moves it up in one step, and the payment shows in the mempool before it lands. Mint before, redeem after, and the rescue money goes to whoever was watching.
The first fix handled payments that leave the reserve under $1. It missed the ones that push it back over. The final version caps redemptions near the pre-payment price either way.
Suno's team reproduced each case in their own test suite before fixing it. The review covered 2,472 lines of Solidity, from issuance and redemption through to the cross-chain layer.
Comi Roa retweeted
Congrats to @TACEO_IO on taking Merces to mainnet. Private balances on public rails, now with real funds, computed across the TACEO Network, where Nethermind is one of the MPC node operators.
xitter.cf/TACEO_IO/status/210312…
The privacy layer for onchain finance is now live.
Meet TACEO Merces
Bank infrastructure, asset managers and cross-chain protocols already integrating, read more: core.taceo.io/articles/merce…
Comi Roa retweeted
Congratulations to @0xAlbertG (Nethermind), @nico_mnbl (zkSecurity), and Benedikt Wagner (Ethereum Foundation) on winning one of three Outstanding Paper Awards at TCC 2026, the Theory of Cryptography Conference, for "A Simplified Round-by-round Soundness Proof of FRI."
FRI sits at the core of most STARK-based proof systems, including Starknet's. Its existing soundness proofs are long and hard to check. This paper gives a much simpler one, which is a step toward formally verifying the systems built on it. eprint.iacr.org/2025/1993
Comi Roa retweeted
We completed a security review of @1inch's Aqua and SwapVM.
Aqua is a shared liquidity layer where the same capital backs multiple strategies and tokens stay in the LP's wallet until a swap executes. SwapVM runs swap strategies as signed bytecode programs, so makers get pegged swaps and concentrated liquidity without deploying a contract.
The review covered 1,903 lines of Solidity across three repositories, with well-documented, well-tested code throughout.
Comi Roa retweeted
Stablecoins are turning into payment rails. Tokenized assets are moving out of pilots. But Ethereum's signatures still wouldn't survive a quantum computer. Privacy still isn't there. Scale Ethereum wrong and it loses what made it worth building on.
@_deanstef, our Lead Consensus Researcher, maps the three research pillars: post-quantum security, programmable privacy, and scaling.
xitter.cf/_deanstef/status/20872…
Comi Roa retweeted
If you run an AI security scanner twice, the second turn usually starts from zero. It forgets your codebase, so you get the same false positives every time.
AuditAgent remembers. Every scan builds on the last, so the noise drops and the signal sharpens with every run.
Comi Roa retweeted
We started an audit of @axol_io's PXE Bridge.
It exposes Aztec's shielded settlement to EVM intent solvers over JSON-RPC: solvers request note creation via a simple RPC call, and the bridge's embedded Aztec PXE creates the shielded note and generates the proof on their behalf, so solvers never need to run their own PXE or handle Aztec's private execution model themselves.
Comi Roa retweeted
A proof verified onchain is not useful if there is no budget to use it.
That was the problem with Noir on Stellar. Verifying one proof cost 224.8M CPU instructions, more than half the transaction budget, gone before the application did anything. No state updates, no withdrawals, barely room to emit an event.
We rebuilt the verifier around Stellar's native BN254 host functions. Field arithmetic and multi-scalar multiplication now run in the native layer instead of guest WASM. The contract keeps only orchestration.
Verification now takes 80M instructions, about 20% of the budget, consistent across all eight circuits we tested. On live Testnet, a shielded-pool proof verified for 0.01242 XLM in actual fees.
The other 80% belongs to the application.
Our engineers maintain and optimize the Noir verifier as part of Stellar's zk infrastructure.
Comi Roa retweeted
AuditAgent now scans codebases up to 20k lines in a single pass, up from 12k.
It also connects to GitLab now, not just GitHub. Wherever your code lives, you can point AuditAgent at it.
On our internal benchmark, the updated findings validation kept roughly 25% increase in recall.
An AuditAgent scan raises the baseline before an audit, so auditors spend their time on the business logic AI still misses.
Proud to see @NethermindSec supporting the new @Aptos Security Marketplace by @areta_io
Excited to help #Aptos builders ship securely with support from @Nethermind. 🛡️
#AptosEcosystem #MoveLang #Web3Security #SmartContractSecurity #BlockchainSecurity #SecurityAudits
1/ The Aptos Security Marketplace from Areta Market is now live on @Aptos!
Proven across 10 ecosystems, 2k+ quotes submitted, and up to 30% average cost savings per audit. Alongside the Aptos Foundation, we’re excited to make top-tier security accessible to Aptos builders.
→ aptos.areta.market
Comi Roa retweeted
We completed a security review of @arcxtrade, a yield-decomposition protocol on Starknet that settles across chains by bridging USDC into Wildcat markets through CCTP. The review covered the full Cairo and Solidity codebase, with close attention to the token decomposition model and the cross-chain settlement path. The higher-severity findings were fixed ahead of the beta.
