Founder @SoloditOfficial. Co-founder @Cyfrin
hansfriese.eth
Joined April 2022
- Tweets1K
- Following489
- Followers5.9K
- Likes2.9K
Hans🟪 retweeted
To confidently allocate capital onchain, allocators need a high level of assurance and due diligence.
The bare minimum is security: is this vehicle secure enough to allocate to?
Cyfrin Security has a proven track record of helping teams improve security posture.
Next, risk: how do the protocol and its assets behave under stress, who absorbs losses, and how does the risk spread?
Cyfrin Risk now helps teams answer that.
Our Economic Risk Report for @LotusFi_ examines how Lotus Protocol allocates capital, interest, and losses across its connected markets.
At Lotus, security is our number one priority.
Our pillars: economic design, smart contracts and op-sec.
We’re publishing an Economic Risk Report from @Cyfrin on how Lotus Protocol allocates capital, interest and losses across our connected markets.
lotuslabs.net/research/cyfri…
Hans🟪 retweeted
At Lotus, security is our number one priority.
Our pillars: economic design, smart contracts and op-sec.
We’re publishing an Economic Risk Report from @Cyfrin on how Lotus Protocol allocates capital, interest and losses across our connected markets.
lotuslabs.net/research/cyfri…
Hans🟪 retweeted
Veteran top auditor recently worked with @cyfrin, blown away seeing output of our proprietary AI, Solace.
"Haven't had an audit in my entire career yet where the AI has done so well."
iykyk, Solace included 100% free on private audit engagements, working hard to MAX value 🚀
Hans🟪 retweeted
Running 7 private audits in parallel (8 total) this week, engaging 16 top auditors 🚀
6/8 of the private audits are for returning clients who have done previous @cyfrin audits, 2/8 are for new clients.
Working hard every day helping keep our clients safe, what a blessing 🙏
Manual review has always been a fun. I still write diagrams manually.
after months, did an manual audit, of my own contracts. reading each line, one by one, audit tags and all.
was fun.
learning is same
ai will get you speed on contracts, but it will add lots of redundant logic for edge cases, making contract very hard to review and make sense of.
for <2k nloc its better you write contracts on your own.
3
18
1,096
Hans🟪 retweeted
Cheaply paying the whitehat $250K for a critical infinite XRP supply bug when your treasury has billions?
Thanks for helping ensure the next time an attacker exploits it for 9 figures instead of reporting it in good faith.
This is why people do not take XRPL or Ripple seriously as an org….
Hans🟪 retweeted
There are 3 types of auditors who provide value in the new auditing meta; the more of these 3 skillsets you can excel in & combine, the more value you can provide both to your firm & clients:
1⃣ Automator
Skilled in quality data prep & harvest, post-training/fine-tuning, creating effective robust workflows with continuous improvement mechanics, the Automator partially or fully automates the process of vulnerability discovery with quality control resulting in significant security output with high signal-to-noise ratio.
2⃣ Elusive Bug Catcher
Able to find elusive bugs which the Automator can't yet find, the Elusive Bug Catcher continues providing value.
Over time it becomes harder and harder to remain an Elusive Bug Catcher as the clever Automator continues raising the bar by reverse-engineering heuristics, harvesting better training data & creating new workflows to find the formerly elusive bugs.
3⃣ Reviewer
Consuming the outputs of the Automator's creations, the Reviewer uses their auditing knowledge to enhance, refine, correct & upgrade severity of automatically generated outputs, acting as a skilled human filter between the automation and the final output recipient.
Hans🟪 retweeted
Starting this week running 7 private audits in parallel, engaging 20 top auditors!
* 2 Solana audits
* 2 Audits plus Formal Verification
* TradFi/RWA, Lending, Cross-Chain, Prediction Markets, Stablecoins, Smart Wallets
@cyfrin helping secure great mix of protocol types! 🚀
Hans🟪 retweeted
Now that you're all back in the timeline.
I've got a handful of really solid devs that I've worked with over the past 3 years that I couldn't recommend more.
They're AI pilled, love Svelte and are good with the full stack. They got solid infra experience as well.
Please reach out if you're hiring and I'll connect!