Cyfrin Audits (@cyfrin) / X

Cyfrin Audits

2,423 posts

Cyfrin Audits

@cyfrin

Securing the blockchain and its users. Powering @cyfrinupdraft | @soloditofficial | @codehawks | @battlechain

Request an audit

Joined January 2023

@cyfrin

See Cyfrin Audits’s full profile

Open X

Pinned
Cyfrin Audits
@cyfrin
Apr 15
Your newest AI security engineer has just arrived. Cygent isn't just an AI bug scanner; it learns your codebase, works alongside your team, and writes the PRs to fix them. - Finds bugs - Gets on calls - Schedules tasks - Proactive security advice All in your chat interface 🧵
00:00
17
44
213
30K
Cyfrin Audits
@cyfrin
Jul 3
Congratulations to @Securitize on going public, now listed on the @NYSE as SECZ. 🎉 It's been a privilege to work alongside their team across our private audits, and it's great to see them reach this milestone. Bringing capital markets onchain only works when the infrastructure
1
1
29
2.1K
Cyfrin Audits reposted
Securitize
@Securitize
Jul 2
Securitize is now officially a public company, listed on the @NYSE under the ticker SECZ. Our focus is unchanged: building the regulated infrastructure for the next generation of capital markets. To everyone who helped us get here, thank you. Tokenize the World.
00:00
152
220
1.2K
297K
Cyfrin Audits reposted
Cyfrin CodeHawks
@CodeHawks
Jul 2
Gm, Web3. Did you miss us? To mark the launch of BattleChain Mainnet, CodeHawks is hosting its first audit in over a year! New competition announced: BattleChain Confidence Pools nSLOC: 589 Start date: July 9th, 2026 Noon UTC Duration: 1 Week Total rewards: 7.25 ETH 💰 Check
32
43
306
17K
Cyfrin Audits
@cyfrin
Jul 2
Replying to @cyfrin
BattleChain Mainnet (chain ID 626) and Testnet (chain ID 627) are both live now. ZKSync-based L2, purpose-built for this workflow. AI-native tooling from day one. We've spent years seeing what happens after audits. This is the missing stage.
1
1
7
498
Cyfrin Audits
@cyfrin
Jul 2
Docs:
BattleChain Docs
From docs.battlechain.com
1
1
300
Cyfrin Audits
@cyfrin
Jul 2
We practice what we preach. Confidence Pools — where stakers put up real capital to signal belief that contracts survive their Safe Harbor period — is being audited on @CodeHawks. July 9-16, 7.25 ETH prize pool. Check it out:
Cyfrin CodeHawks | BattleChain Confidence Pools
From codehawks.cyfrin.io
1
6
341
Cyfrin Audits
@cyfrin
Jul 2
Replying to @cyfrin
Safe Harbor is the legal innovation that makes this work. Protocols commit to not pursuing legal action against whitehats who attack in-scope contracts in Attack Mode. Find the bug. Prove it. Keep your bounty. Stay anonymous if the agreement allows. All explicitly protected.
1
2
207
Cyfrin Audits
@cyfrin
Jul 2
The flow is simple: → Audit your contracts → Deploy to BattleChain with real liquidity → Create a Safe Harbor agreement and request Attack Mode → Whitehats go to work → DAO promotes battle-tested contracts to Production → Ship to mainnet with confidence
1
3
180
Cyfrin Audits
@cyfrin
Jul 2
Replying to @cyfrin
The core problem: bug bounties ask whitehats to report vulnerabilities, not exploit them. That kills the incentive to dig deep. And testnets use fake money, so nobody behaves like an attacker with real skin in the game. BattleChain fixes both. Real funds. Real exploits. Legal
1
3
377
Cyfrin Audits
@cyfrin
Jul 2
Replying to @cyfrin
BattleChain is a pre-mainnet, post-testnet L2 with real funds. Deploy your audited contracts. Whitehats legally attack them for bounties. Only battle-tested contracts get promoted to mainnet. It's staging for smart contracts, except the testers are trying to drain you.
1
6
544
Cyfrin Audits
@cyfrin
Jul 2
Every protocol we've audited faces the same gap. Code goes from audit to mainnet with real money and nothing in between. No staging. No adversarial testing. Just hope. We built something to fix that. Introducing BattleChain. Trial by Fire. 🧵
8
12
41
4.1K
Cyfrin Audits reposted
Findlay
@0xboo
Jul 1
1/ The Aptos Security Marketplace from Areta Market is now live on @Aptos! Proven across 10 ecosystems, 2k+ quotes submitted, and up to 30% average cost savings per audit. Alongside the Aptos Foundation, we’re excited to make top-tier security accessible to Aptos builders. →
8
61
110
11K
Cyfrin Audits
@cyfrin
Jul 1
Thrilled to be part of this!
Findlay
@0xboo
Jul 1
1/ The Aptos Security Marketplace from Areta Market is now live on @Aptos! Proven across 10 ecosystems, 2k+ quotes submitted, and up to 30% average cost savings per audit. Alongside the Aptos Foundation, we’re excited to make top-tier security accessible to Aptos builders. →
3
9
1.2K
Cyfrin Audits
@cyfrin
Jun 22
Most ZKVM explainers are either too high-level to be useful or too academic to be practical. The middle ground, where you actually understand why the pipeline works and can see it in code, barely exists. Our team wrote the resource we wished we had. 🧵
2
1
14
1.4K
Cyfrin Audits
@cyfrin
Jun 22
Replying to @cyfrin
If you're building on or around ZK infrastructure, understanding what's actually happening under the hood changes how you reason about tradeoffs, security assumptions, and where things can break.
1
5
343
Cyfrin Audits
@cyfrin
Jun 22
We put this together because the gap between "I get the concept" and "I understand the system" is exactly where costly mistakes live. Hope it's useful. Big shout out to @Ubermensh3dot0 for the article!
Making Sense of ZK Virtual Machines
From cyfrin.io
5
341
Cyfrin Audits
@cyfrin
Jun 14
The Calldata Digest from ERC-8213 is two lines of code. Here's exactly how it works, with a concrete test vector you can run right now. 🧵
3
12
1.4K
Cyfrin Audits
@cyfrin
Jun 14
Replying to @cyfrin
This is chain-agnostic by design. The same transfer calldata produces the same digest on Ethereum, Arbitrum, Base, or any EVM chain. A protocol can publish expected digests alongside upgrade transactions the way Linux distros publish SHA-256 hashes alongside ISOs. Signers compute
1
410
Cyfrin Audits
@cyfrin
Jun 14
This is the primitive behind every "read the calldata" recommendation we've given teams for two years. ERC-8213 makes it executable. Reference implementation and the full spec:
GitHub - PatrickAlphaC/erc8213: A static site for teaching about ERC-8213
From github.com
1
364