Wolf (@recursiveAudit) profile picture

Security Researcher, DM for private audits - https://teapawt.net/t.co/TU9hL10mSC

Mountains
Joined September 2022
I’m officially open for private smart contract audits.
After months sharpening my skills on real-world projects (including worked with @cantinaxyz), I’m ready to bring that same focus to your code. If you’re building and want a thorough, detail-driven review, my DMs are open.
1
1
126
April 2026 was the worst month ever for DeFi exploits. ~$635M lost in total. 28 incidents in 30 days. Apr 1 → Drift → $285M Apr 3 → Silo V2 → $392K Apr 4 → TMM → $1.67M Apr 5 → Denaria Finance → $165K Apr 9 → Aethir → $423K Apr 12 → Hyperbridge → $2.5M Apr 12 → SubQuery → $60K Apr 13 → Dango → $410K Apr 13 → Mona → $61K Apr 14 → Zerion → $100K Apr 16 → Rhea Finance → $18.4M Apr 16 → Grinex → $15M Apr 18 → Kelp DAO → $293M Apr 20 → Juicebox V3 → $52K Apr 20 → Thetanuts Finance → $50K Apr 21 → Volo Protocol → $3.5M Apr 22 → Kipseli → $80K Apr 23 → Giddy Finance → $1.3M Apr 25 → PurrLend → $1.5M Apr 26 → Scallop → $150K Apr 27 → Singularity Finance → $413K Apr 27 → ZetaChain → $300K Apr 28 → JuDAO → $228K Apr 28 → Quant → $138K Apr 29 → Aftermath Perps → $1.14M Apr 29 → Sweat Foundation → $3.5M Apr 29 → Syndicate → $330K Apr 30 → Wasabi Protocol → $5M+ Two attacks (Drift + Kelp DAO) account for ~95% of the total. Both linked to admin-key compromises with no timelock or multisig. DeFi security is broken at the infrastructure layer. Bridges, deployer keys, and cross-chain messaging keep producing the largest single-incident losses. Stay safe. Revoke approvals. DYOR.
10
8
183
9,437
Security researchers, a new one just dropped. The @revertfinance x Cantina security competition is now live. With $50,000 on the line, you'll be reviewing the pricing engine built for stableswap pools on top of Uniswap v4. Start here: cantina.xyz/competitions/e55…
3
1
58
4,243
Just wrapped up my 3rd private audit — and this one was intense. Findings: 3 High severity issues, 8 Medium severity issues A lot of these weren’t obvious at first glance. The kind of bugs that sit quietly behind “working” logic
1
39
It’s rarely about one big obvious mistake — more often it’s a chain of small oversights compounding together. This audit reinforced a few things for me: - Edge cases are where the truth is - Complex flows hide simple bugs Assumptions are the biggest attack surface
1
20
Still learning, still improving, and still pushing to get sharper with every audit. On to the next one. thanks @ethereum @PatrickAlphaC. “Open for private audits”
11
Enough, from so long I am not at all consistent several months has passed feels like I am left out but I know I am lot more than this, this is not me. full stop to all, zero distractions zero drama no more being victim of my own life. I will change things. Just all In like wolf
1
47
For faster communication, you can also reach me on Telegram: t.me/recursiveEth Builders, feel free to drop me a message if you’re looking for a private smart contract audit.
1
55
New chapter starts, Thanks @cantinaxyz for the opportunity excited to work with you.
We're excited to welcome @recursiveAudit as our newest Cantina Apprentice! A passionate security researcher with an unwavering commitment to excellence. Let's dive into his story.
2
150
We're excited to welcome @recursiveAudit as our newest Cantina Apprentice! A passionate security researcher with an unwavering commitment to excellence. Let's dive into his story.
1
2
2
15
1,739
From tommorow onwards i am gonna start challenge for 21 days. I will be posting what i learnt, hours of focused works & informative content on security stay tuned.
3
167
For those who are worrying and doubting themselves, thinking they are not capable, it's just a matter of time before you witness success that you never imagined(Dear me). So just put in the work daily and trust yourself — you will achieve everything you want.
1
5
345
Thanks @cantinaxyz & @InfraredFinance, for such a good start of a year, many more to come and win the contests.
2
2
55
1,621
Thanks Benqi Finance @BenqiFinance & @CyfrinUpdraft and @PatrickAlphaC for the opportunity.
6
343
Thanks @sherlockdefi for the opportunity.
5
236
Thanks @cantinaxyz for the opportunity.
1
37
953
💎 What is the Digital Asset (DA) Standard on Aptos? Aptos redefines NFTs with Digital Assets, where every NFT/token is an Object with its own unique address. Let’s break it down! 🧵👇 🔹 1. Why is Aptos DA different? Unlike traditional NFTs, Aptos Digital Assets are not just tokens—they are on-chain objects with their own unique addresses. This brings: ✅ More efficient storage (no account clutter). ✅ True ownership & portability (each NFT is an independent entity). ✅ Customizability (update metadata, add new traits, and mutate NFTs). Aptos NFTs are smart, adaptable, and built for the future. 🚀 🏗 2. How are Digital Assets created? Aptos NFTs follow a structured approach with two main objects: 🔹 Collection → A group of NFTs with metadata (collection.move module). 🔹 Token → The actual NFT, which belongs to a collection and stores its own attributes (token.move module). Each NFT must be part of a Collection, but the Collection does not own the NFT—creators or users do. 📌 3. Collections: Fixed vs. Unlimited NFTs are grouped into Collections, which can be either: 1️⃣ Fixed Supply → A limited number of NFTs can be minted. 2️⃣ Unlimited Supply → No cap on minting; creators can add more anytime. Each collection contains metadata like name, creator, and URI. 🎨 4. How is NFT metadata stored? Each Aptos NFT stores its properties in a Property Map (property_map.move module), which includes: 🔹 Attribute names (like "rarity" or "power level"). 🔹 Data types (string, number, boolean, etc.). 🔹 Values (e.g., "Legendary", 100, true). This enables dynamic, customizable NFTs with rich metadata. 🚀 5. NFT Actions: Transfer, Burn, Mutate ✅ Transfer → Move NFTs seamlessly between wallets. ✅ Burn/Delete → Permanently remove NFTs from circulation. ✅ Modify Metadata → Update an NFT’s image, description, or attributes after minting. 💰 6. Royalties: How Creators Get Paid Royalties ensure that NFT creators earn a percentage of secondary sales. 📌 Not enforced on-chain → Since Aptos NFTs are objects, they can be transferred freely. 📌 Handled by marketplaces → Royalties are deducted when NFTs are sold through platforms that support them. 📌 Customizable settings → Creators can set royalties at minting and, in some cases, update them later. 🛠 7. Minting NFTs Easily The aptos_token module simplifies NFT creation by allowing users to: ✅ Mint transferable NFTs (with royalties). ✅ Create soulbound NFTs (non-transferable). ✅ Manage NFT properties without writing smart contracts. Perfect for creators who want plug-and-play NFT minting on Aptos. The Aptos Digital Asset standard isn’t just another NFT model—it’s a scalable, efficient, and customizable framework for Web3 creators. #Aptos
1
2
168