@DevDacian

Head of Security Research @Cyfrin Protected $100,000,000,000+ on-chain TVL!

 🇰🇷
dacian.me
Joined April 2021
  • Tweets3.7K
  • Following322
  • Followers6.8K
486Media
1 Hour with @PatrickAlphaC where I cover: 1⃣ how I break down stateful fuzz testing by invariant types and contract lifecycle 2⃣ my favorite general heuristics which I use to find all sorts of bugs in many different codebases 3⃣ mindset and ultimate recipe for success Link👇
9
21
3
229
62,235
This week running 9 private audits in parallel with 11 private audits in total, engaging 24 top auditors! Blessed to be working hard every day doing our best to keep our clients safe both on-chain & off-chain! web3, web2, FV, AI @cyfrin doing it all to very high standard 🚀
1
38
880
Yes our proprietary AI works great on large 10,000+ nSLOC smart contract codebases because it has been equipped with the "ways of thinking" to effectively handle these.
Jorgect.eth
@TamayoNftOct 24
"The effectiveness of AI drops extremely fast once you go beyond 5k lines" I thought that until I met I meet the cyfrin AI auditor
2
27
1,603
"The effectiveness of AI drops extremely fast once you go beyond 5k lines" I thought that until I met I meet the cyfrin AI auditor
Flint
@0xFlint_Oct 24
Not necessarily devs maturing, but everyone is using the public AI auditing tools and many solidity codebases are so small and simple that AI catches 95%+ of bugs. The effectiveness of AI drops extremely fast once you go beyond 5k lines.
1
1
5
1,739
View from Busan, South Korea
1
44
1,121
Important updates in new version of coldclone - if you are a dev or auditor, use it to scan & optionally sanitize foreign code repos before doing anything else! Works stand-alone via scripts or as a plugin for claude/codex. github.com/devdacian/coldclo…
2
3
29
1,205
I'm a foreigner (외국인) living in South Korea for 3+ years in ultra-conservative South where I'm the only foreigner in my area. Ask me anything about life in Korea, culture, things I like/dislike, Korean people/society, how I'm treated as a foreigner etc.
51
8
4
193
132,649
Congrats to @Logosfi on closing the seed round and introducing Logos at Money20/20! 🎉 Institutions need clear, verifiable evidence before they commit to tokenized securities. Great to see Logos helping set that standard, and the security and risk side is where we’re excited to help!
Logos
@LogosfiOct 19
Today at @money2020, we're introducing Logos: the evidence layer for acceptance of tokenized assets and stablecoins. We're building shared evidence infrastructure so institutions can put more assets to work on blockchains, in custody, lending and payments.
3
2
17
1,291
Dacian retweeted
Armada
@ship_armadaOct 19
Our crowdfund has reached $417k from 69 participants! We’re well on our way to hitting our $1M target before it closes on 29th October. If we don't hit it, every commitment is returned in full. Need an invite? DM us. Have one? Commit USDC at fund.armada.blue
5
14
5
47
4,610
This week @cyfrin running 8 private audits in parallel engaging 20 top auditors! 5 returning & 3 new clients, great mix of protocols each with hand-picked specialist audit team plus me driving our proprietary AI. Pumping out valuable bugs every day at scale, truly blessed 🙏
4
72
2,280
Every problem I have now is the result of being too successful. Literally winning so hard consistently has created an entirely new set of problems to solve. Good problems to have, challenging us to solve them & reach even higher levels of success 🚀
5
1
68
2,171
Our frontend audit with @cyfrin is complete. No critical or high findings, and all 7 medium findings resolved. Report: gitlab.com/notesystems/note-… Our backend audit is in progress. Across 75 smart contracts, no high or critical issues found. Mainnet is getting closer.
35
46
13
183
23,260
Did aave & uniswap achieve long-lasting success by needing to launch in 8 days so get 1 rushed budget audit then yolo deploy? No lol, so why do you think your protocol will be different? Blockchains are the most hostile place on earth to deploy code, prepare accordingly 🫡
4
5
52
2,140
All our clients are using AI & various scanning services before coming to us for private audit yet @cyfrin is finding more valuable bugs than ever using our proprietary AI Solace & human auditors. Our capacity for vuln discovery has massively expanded this year 🚀
4
62
2,351
Running 7 private audits in parallel (8 total) this week, engaging 16 top auditors 🚀 6/8 of the private audits are for returning clients who have done previous @cyfrin audits, 2/8 are for new clients. Working hard every day helping keep our clients safe, what a blessing 🙏
4
1
57
1,748
Great feedback from recent private audit client, love to hear it @cyfrin always doing our best to maximize value every way possible while having a great time since this work is so much fun!
1
44
1,807
3yr speedrun auditor -> executive, ask me anything
Dacian
@DevDacian9 Oct 2023
October 2022 - started learning solidity as a hobby March 2023 - focusing on security & began writing my "Deep Dive" series October 2023 - blessed to join @cyfrin as a full-time smart contract security researcher! 🚀A lot can change in a year if you put your mind to it🚀
16
2
69
4,093
Dacian retweeted
Will Nundy
@willnundyOct 9
Your audit report covers the code you gave us. Here's the list of things that can still drain you.
1
2
2
277
iykyk @cyfrin
3
30
1,436
My X feed has recently degenerated into: 🥇 thirst traps (especially from token2049) 🥈 plague scenarios/theories/doom 🥉 various war/conflict stuff I don't like any of these posts but X keeps showing them, is there really nothing else more interesting ?
4
28
1,656
One thing we are seeing in project repos is docs bloat, tons of outdated markdown giving conflicting & stale info to auditors. Do occasional docs cleanup especially before audit, archive the old stuff make it really easy for auditors to find relevant updated docs 🙏
7
2
45
1,615
Load more