Solidity Enginner @safe | Smart Contract Dev & Auditor | Ex @nethermindeth, @dynartstudio, @OriginsXYZ , @SovrynBTC & @Kleros_io
Blockchain
Joined February 2016
- Tweets749
- Following1.1K
- Followers1.9K
- Likes685
Shebin John retweeted
putting together an instant wallet that runs on @safe
i needed social recovery and was rolling my own
@clawdbotatg found an existing, audited version
thank you @candidelabs @SherifA990 @Shebitweet
Looking forward to meeting you all in #mumbai 💪🏾
DSS 2026 speaker: Shebin John
“Guarding the Guard: Engineering a Deny-by-Default Policy Engine for Safe”
Take a look and add the talk to My agenda:
defisecuritysummit.org/2026/…
Tickets: luma.com/9qtxqqxx
ALT DSS 2026 speaker announcement card for Shebin John: Guarding the Guard: Engineering a Deny-by-Default Policy Engine for Safe.
Self custody at scale by @safe 💪🏾
Safe's quarterly report is live.
TLDR;
Safe put up a record quarter in a market most people called bearish.
→ $6.8B in stablecoins secured in Safe, roughly 2% of global stablecoin supply.
→ 61.1M smart accounts now deployed, with 2.21M net new in Q1 alone.
→ 50.9M transactions in March, our biggest month yet.
Read all about it ↓
safefoundation.org/reports/q…
Safenet 🔒😎
Today, we announced Safenet Beta.
Wallets today can’t stop sophisticated phishing, address poisoning or drainer scripts. And users are always one signature away from losing everything.
Self-custody is under attack and Safenet is built to defend it.
🧵Here is what we are committing to build in the coming months.
Great conversation on @accountantquits about how on-chain finance teams can stay secure.
Honoured to be part of the 100th episode, congrats to @umar25mh 🚀
How do Web3 finance teams protect on-chain treasuries without slowing down operations?
@Shebitweet from @safe shows how to protect on-chain treasuries using multisig wallets, Guards, Guardrails, Fiducia, and Policy Engine, plus actionable tips web3 finance teams can implement today.
Chapters
(0:00) Coming Up
(2:42) Thank you for Episode 100
(3:41) Onchain treasury security challenges
(5:50) Safe Modules and Guards
(9:32) How Guards Work
(10:59) New feature with Spaces
(13:43) Delegate call overview
(16:11) Guardrail protection explained
(18:28) Get 2 months for free with @RequestFinance
(20:08) Fiducia & co-signers
(24:58) Policy Engines
(30:55) Implementing Policy Engine
(32:51) Zodiac’s Role Modifier
(34:52) Safe Research’s vision
(38:01) Other Safe projects
(39:42) Adoption hurdles
(41:25) Implementation barriers for finance teams
(42:59) Concluding thoughts
(45:35) Reach out to Shebin
🚀 Introducing the new Policy Engine from @Safe Research Team - the next evolution of guard frameworks for smart-contract wallets.
🔍 Check it out here 👉 safefoundation.org/blog/safe…
🔐 Modular policy contracts, deny-by-default model, fine-grained control.
Want to restrict token transfers OR require cosigner on unknown calls? Done ✅
🧰 Built for power-users & DAOs – think of it as programmable guardrails for your wallet.
Safe App: safe.dev/policy-engine
Those who like video format, @adamshurwitz has created an awesome one with @NotebookLM
xitter.cf/adamshurwitz/status/19…
The 16 min podcast @NotebookLM made was good. Need to watch this video to compare it too.
Can’t wait to hit the stage at #DefiSecuritySummit! 🚀
See you in Argentina! 🇦🇷
Multisig alone cannot stop every attack.
@Shebitweet, Senior Research Engineer at @safe, will speak at DSS about Safe’s evolving guard system, and show how layered on-chain defenses enhance wallet security without hurting usability.
Just dropped Part 2 of our @safe Guard series, & it’s all about Fiducia - a powerful guard that gives you precise control over who your Safe interacts with & how.
If you want to take your Safe’s security to the next level, this is a must-read: safe.global/blog/safe-resear…
If you want a walkthrough of the Fiducia, please watch this video: youtube.com/watch?v=79X4yDhn…
Shebin John retweeted
What’s important for collecting @safe signatures? It needs to be decentralized; It needs to be permissionless.
AND it needs to be accessible!
We used @erc4337 and @Waku_org to reduce friction when interacting with our decentralized queue.
Checkout the details:
safe.global/blog/safe-resear…
No need to fear DELEGATECALLs anymore in #safe! Guardrail is here for the rescue!
Are you using or building on Safe and worried about malicious DELEGATECALLS?
Meet Guardrail - our new project at Safe Research which introduces a simple, composable Guard that blocks unauthorized DELEGATECALLS in your smart wallet flow
Think of it this way
🔐Multisig = multiple keys to your vault
🛡️Guardrail = a security officer at the door, double-checking every transaction even after it's signed
Guardrail focuses on one high-risk area: DELEGATECALL
This opcode lets your Safe run external code as if it were its own.
Super flexible, but also dangerous if misused
Guardrail only lets your Safe DELEGATECALL into contracts on a specific allowlist.
🔐 You control the list.
⌛ New additions are time-delayed
🚨 Removals are instant
This gives you time to catch any malicious/dangerous transaction attempts
If you want a walkthrough of the Guardrail, please watch this video: youtu.be/occ-MP98oK0
Shebin John retweeted
Privacy is still massively undervalued in Web3.
While others chase trends, a few are building the foundations.
Our latest Safe Research post breaks down the state of end-to-end encryption (E2EE) - a core primitive for privacy and data sovereignty that remains underdeveloped in our Web3 apps and infrastructure.
Read the article in the next tweet
Shebin John retweeted
@safe guards with cosigners make web3 more accessible and secure for users and are used by @HypernativeLabs, @getfailsafe or @blockaid_.
Varangian is a simple cosigner that you can host yourself on GitHub.
Read more about it on our blog: safe.global/blog/safe-resear…
Safe v1.5.0 is out 🔥🔥🔥
Safe v1.5.0 is here 🟢
@V_Seehausen (DevRel at SafeLabs) and @NLordello (Lead Research Engineer, Safe Research) break down the key features:
✅ Module Guards - Enhanced security for module transactions
✅ Extensible Fallback Handler - Better composability
✅ @zkSync native support - Consistent addresses across networks
✅ Improved developer experience and MORE
WATCH 👇
There's a new version of this post