fedebianu

yBorg - Week 3 Day 2 Today’s speaker: @BowTiedDravee on “Thinking Like an Attacker.” Use attack trees: start with the goal, work backward, and challenge assumptions until attacker control reaches something breakable. 🌶️ Hot take: AI is a gun. You still need to aim. Watch 👇

yBorg - Week 3 Day 1 Today we kicked off our bug bounty hunt with an alpha-packed talk and Q&A with reknowned bughunter @0xriptide We also covered preliminary steps to consider before kicking off an ai-assisted bughunt. Enjoy the vid, and post your comments below 👇

yBorg - Week 2 Day 2 Today’s speaker: @0xfirefist demos two AI-powered tools. x-ray maps protocol architecture and invariants. solidity-auditor uses specialist agents and memory-powered loops to find bugs. 🌶️ Hot take: Teach agents how to think, not what to look for. Watch 👇

yBorg - Week 1 concluding! If you've been following along, reply with your AI-assisted audit workflow diagrams below 👇 The block will continue to focus on building our tools by running them against some shadow audits at the beginning of next week, then will be joining some live audits towards the second half of the week. If you're looking for something more to do over the weekend, here we share the prep reading list sent out to all accepted applicants: Security • yAudit Common Web3 Security Issues: github.com/yAudit/CommonWeb3… • yAudit DeFi Fork Bugs: github.com/yAudit/defi-fork-… • yAudit audit reports: reports.yaudit.dev/ • yAudit fellowship audits: github.com/yAudit/fellowship… • yAudit Solidity Proxy Playground: github.com/yAudit/Solidity-P… • Smart Contract Security (@cyfrin): updraft.cyfrin.io/courses/se… • Things I Wish I Knew Before Starting yAcademy (@devtooligan): youtube.com/watch?v=QeNDS2Vk… • Secureum Smart Contract Security 101: secureum.substack.com/p/smar… • OWASP Smart Contract Security: scs.owasp.org/ AI & Agents • Harnesses in AI, A Deep Dive: youtube.com/watch?v=C_GG5g38… • The Harness Playbook: stencil.so/blog/harness-play… • AI and agents (@iiiichigo_chan): teapawt.net/iiiichigo_chan/status/… • Hugging Face Intro to LLMs: huggingface.co/learn/llm-cou… • Hugging Face Agents Course: huggingface.co/learn/agents-… • Learn how agents work: twotimespi.dev/ 𝗔𝗜 𝗮𝗻𝗱 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 • Technical Review (@Kritt_AI): kritt.ai/technical-review/ • AI Auditing Methodology Pt I (@xy9301): teapawt.net/xy9301/status/20331862… • AI Auditing Methodology Pt II (@xy9301): teapawt.net/xy9301/status/20360178… • AI Auditing Methodology Pt III (@xy9301): teapawt.net/xy9301/status/20718452…

yBorg - Week 1 Day 4 Today's speaker: Andrew @andrew_anderson, ex-@OpenZeppelin and creator of @hob_app, walks through examples of running an audit with Hob. Hot take: "Stop writing audit notes inline. You're gaslighting the LLM." Watch and drop questions and comments below 👇

yBorg - Week 1 Day 3 Today's speaker: @fucory, ex-Google engineer and creator of the Smithers workflow generation tool. Tons of alpha from his experience building with agents. Watch the video, try out Smithers, and drop questions and comments below 👇

yBorg - Week 1 Day 2 Meet @0xFlint_, the newest yBorg mentor. A gigachad security researcher with a diverse background who spends his free time getting lost in massive Rust codebases. He share's his audit methodology and thoughts on AI in a new video. Today’s yBorg assignment: - Watch the vid - Soak up the alpha - 👉 Think about how you’d turn his process into an AI-assisted workflow For those who are joining us online, share a diagram in the comments showing how you'd turn Flint's process into an AI-assisted workflow - we'll be sharing examples from the Discord later. This whole week we are thinking about process, both human and AI. We'll be sharing lots of diagrams and examples throughout the week and by the end of the week, fellows complete a diagram of what they are building! @0xFlint_ also hosted an AMA on the discord and we can continue that here in the comments if anyone has anything they'd like to ask. Enjoy the vid and don't forget to share your diagrams and ask questions in the comments!

yAudit Fellowship Block 8: yBorg is off to a great start. Here's the recording of the opening session with guest speaker engn33r @bl4ckb1rd71 recorded Monday. engn33r's presentations starts at 13:29

yBorg has officially kicked off! :🚀 Slides from this morning: docs.google.com/presentation… (@devtooligan) docs.google.com/presentation… (engn33r @bl4ckb1rd71) We’ll be sharing recorded presentations, course materials, and more throughout the block. Stay tuned!

yAudit kitchen is busier than ever, who's ready to join in on the fun? 🧑‍🍳 See you soon, fellows

Following @thedaofund’s funding round, we’d like to thank every donor for their contribution! All funds raised will directly support our open Fellowship program, helping us keep security research training free and accessible to accepted fellows.

yAudit has a secret weapon. 🤫 Earlier this year, we developed yAgent, our in-house AI auditor. We've run it on every review since March, and it's really changed the way we work and raised the bar on our security reviews. Our researchers can go deeper on the code, move faster, and explore more ideas as they go. yAgent handles the groundwork so the team can spend its time on the hard problems. The tool was built on top of the award winning vulnerabilitiy detection engine developed by @zerocool_ai. We added our own workflows, knowledge bases, and custom skills to replicate the expertise and approaches we've developed over the years through auditing DeFi's biggest protocols like Yearn, Euler, and many more. We'll be sharing more details soon, including case studies, experiences, and tips for those trying to implement AI into their security process.

✨yAudit Fellowship Alumni Spotlight #3 ✨ Before attending the Fellowship's Block 3, @thebensams was a staff security engineer at a consumer app company with some interest in blockchain security, but no foothold in the space. Today, he leads the blockchain practice at Trail of Bits.

✨yAudit Fellowship Alumni Spotlight #2 ✨ When @devtooligan first came into yAudit Fellowship's Block 3, he was a smart contract engineer at Yield Protocol expecting it to round out his security skills while staying on the dev side.

✨ yAudit Fellowship Alumni Spotlight ✨ Before attending yAudit's Fellowship, @HHK_eth was a part time dev for Sushiswap while studying. ~2.5 years ago he was recognized as one of the top fellows during the Fellowship's Block 5: he was quickly invited to join as a yAudit resident auditor, which he still serves as today. At yAudit, HHK has worked with some of the largest protocols in the industry: Curve, Centrifuge, Euler and Yearn are just some of the projects he's audited.

🧵 In 2021, we noticed a problem. There was no structured, accessible pathway into professional smart contract security. Plenty of talent in the Ethereum community, but no bridge between "interested in security" and "executing real audits." So we built one.