Don Dodge retweeted
There are a few protocols that do security the right way.
@aave is one of them.
They invited a security team to their offsite to help build their new protocol with security in mind from day 1.
But not all teams are doing this
Don Dodge retweeted
.@cyfrin has been working tirelessly to shift security left, into developers' hands, since day 1.
- Building tools like @SoloditOfficial, Aderyn, Moccasin
- Teaching people how to become auditors at @CyfrinUpdraft
- Doing conventional audits
And we just took another step
Don Dodge retweeted
It lives exactly where your devs live.
→ Works directly inside Slack, Discord, Telegram, and IDEs via MCP.
→ Proactive Messaging: It doesn't wait to be asked. It listens to your chats and Google Meet voice calls, surfacing security insights in real-time.
Don Dodge retweeted
The lifecycle:
1️⃣ You open a PR.
2️⃣ Cygent auto-reviews it inline on GitHub.
3️⃣ You ping Cygent in Slack: "Hey, fix finding H-1."
4️⃣ Cygent writes the Solidity, tests it, and pushes the commit.
5️⃣ You review and merge.
Don Dodge retweeted
Cygent fixes this.
Old tools: "Here is a list of problems. Good luck."
Cygent: "I found a critical MEV risk in withdraw(). I wrote the fix, verified the build, and opened a PR for you."
You ping Cygent like any other coworker. Tell it what to fix, and it handles the rest.
Don Dodge retweeted
Your newest AI security engineer has just arrived.
Cygent isn't just an AI bug scanner; it learns your codebase, works alongside your team, and writes the PRs to fix them.
- Finds bugs
- Gets on calls
- Schedules tasks
- Proactive security advice
All in your chat interface 🧵
Don Dodge retweeted
Roadmap:
✅ Testnet — LIVE NOW
🔜 Prediction markets on attack periods
🔜 Prividium (private attack transactions)
🔜 AI Desktop support (no terminal needed)
🔮 Mainnet
Cyfrin is 100% bootstrapping this.
$3.4B in losses last year proves that what web3 is doing isn't working.
Come break some contracts → battlechain.com
Don Dodge retweeted
The lifecycle:
1. Deploy audited contracts to BattleChain with real liquidity
2. On-chain Safe Harbor protects whitehats legally
3. DAO approves contracts for attack mode
4. Whitehats, AI agents, experimentalists, open season
5. Survive? Promote to production → deploy to mainnet
If you get hacked on BattleChain, that's the plan. You're on the ultimate red team platform.
Don Dodge retweeted
BattleChain fixes this.
Bug bounties: "find a vuln, write a report, we'll pay you (maybe)."
BattleChain: "find a vuln, exploit it, keep 10%, return the rest."
You stole the money. You sent it to the recovery address. You keep your cut.
No politics.
No discretionary payouts.
On-chain Safe Harbor agreements make it legal.
Don Dodge retweeted
AI is accelerating the problem on both sides.
LLMs produce insecure code 45% of the time. A study of 1,000+ AI-generated Solidity contracts found severe flaws in the majority.
Meanwhile, Anthropic tested AI models against 405 exploited contracts; they exploited OVER HALF. Cost per scan: $1.22. Exploit revenue doubling every 1.3 months.
Don Dodge retweeted
Web3 lost $3.4 BILLION to crypto hacks in 2025 (@chainalysis). The Bybit exploit alone was $1.46B. North Korea stole $2B+.
Why? Web3 has no staging environment. You go from testnet (fake money, no adversaries) straight to mainnet (real money, real adversaries). Nothing in between.
Don Dodge retweeted
As of today, BattleChain testnet is LIVE.
The pre-mainnet, post-testnet blockchain, where whitehats legally attack your smart contracts before they reach production.
Deploy. Get attacked. Ship stronger.
Here's why we built it, what it is, and how you can get involved 🧵
Don Dodge retweeted
Vote for us in the Nominee Selection of the Security Council.
Voting is open from March 22nd, 2026 - 12:32 pm UTC until March 29th, 2026 - 12:32 pm UTC.
Member Election starts Apr 12, 2026.
tally.xyz//gov/arbitrum/coun…
Don Dodge retweeted
Cross-chain bridges have lost more user funds than any other category of web3 infrastructure. 🔗
Not because bridge teams are careless. Because bridge security is fundamentally harder than single-chain protocol security.
Here's why.
🧵
Don Dodge retweeted
ERC-8004 is now live on Ethereum mainnet: the standard for trustless AI agents, enabling portable identity, verifiable reputation, and cryptographic validation.
We're proud to have audited the contracts alongside @Nethermind and the @ethereumfndn Security Team🛡️🙌
Don Dodge retweeted
This isn't theory. You'll build actual programs:
→ Oracles
→ Piggy Bank (PDAs)
→ Dutch Auction (SPL Tokens)
→ AMM (Constant Sum)
→ Cross-Program Invocations
Each project in BOTH Anchor and Native Rust.
That's 6 Anchor + 6 Native programs you'll ship.
Don Dodge retweeted
Solana developers, this one's for you 🚀
Introducing: The Solana Development Course on Updraft
Build real programs—Oracles, AMMs, Auctions—in both Anchor AND native Rust.
Completely free.
Here's everything you need to know 👇
Don Dodge retweeted
Your Updraft challenge NFTs now have a home 🏠
We heard you: you've been minting proof of your skills, but nowhere to show them off.
That changes today.
Your on-chain achievements are now front and center on your Cyfrin profile 🧵
Connecting BLE chips to Hubble Betwork satellites around the world is astounding. Getting TI to embed Hubble is a giant step forward for the industry.
Big news 🚀
TI Bluetooth Low Energy chips will now ship with global connectivity via Hubble and Texas Instruments.
• 90M+ terrestrial gateways worldwide
• No GPS
• No cellular
• No gateways to deploy
See it live at #CES2026 — TI Booth N115
Details: prnewswire.com/news-releases…
Don Dodge retweeted
Replying to @cyfrin @CyfrinUpdraft
Our security work scaled dramatically.
75+ private audits completed in 2025:
• Secured $50B in TVL
• Discovered 1,000+ vulnerabilities
• 37 critical, 82 high, 164 medium-severity issues found
• Supported protocols like Metamask, Wormhole, Ethena, Uniswap, & more.





