Pinned Tweet
3rd bug bounty W 🤠
I just found a confirmed bug on @immunefi #immunefitribe immunefi.com/s/ss/?severity=…
2nd bug bounty W
I just found a confirmed bug on @immunefi #immunefitribe immunefi.com/s/ss/?severity=…
⚡️⚡️ IronsideSec ⚡️⚡️ retweeted
a major hack happened recently resulting in millions of dollars in losses. we had been actively submitting vulnerability reports to their bug bounty program only to be kicked out. looking at the data:
• Total submitted: 42
• Severity: 5 Critical, 11 High, 12 Medium, 8 Low, 6 Unknown
• 1 triaged/confirmed, 1 resolved
• Paid: 20k
their team ignored multiple critical findings and accepted operating under high risk assumptions. we tried to do our best by back-channeling with devs and getting many issues fixed without payment expectations because everyone saw the hack coming. well, it happened.
wonder how many security researchers got tired of submitting valid issues only to be ignored. if you ignore the goodwill security researchers, they will stop helping you and trust me, YOU NEED THEM MORE THAN THEY NEED YOU.
First Bug Bounty payout 🤠🤠
I just found a confirmed bug on @immunefi #immunefitribe immunefi.com/s/ss/?severity=…
⚡️⚡️ IronsideSec ⚡️⚡️ retweeted
Hey chat, we are still looking for a couple of strong senior security researchers at @Certora to join our team of top researchers in the space and work with some of the biggest protocols.
Do not overthink it just send me a DM with your public profile or portfolio.
who is this? what project is this? what was the bug?
i NEED to know
Security researcher ily2 has just earned a staggering $3,000,000 from submitting a critical smart contract bug via Immunefi.
That's the largest single payout in web3 security in recent memory.
In total, he's submitted 3 reports. All 3 were paid. 100% accuracy.
His leaderboard update is coming soon, but you can pledge IMU to him now and earn when he finds the next one:
immunefi.com/pledge/ily2
⚡️⚡️ IronsideSec ⚡️⚡️ retweeted
After nearly a year of writing and revision, we’re proud to finally present a new book from RareSkills, created in collaboration with @Certora:
Formal Verification with the Certora Prover
Certora makes formal verification accessible—but for newcomers, there’s still a large set of unfamiliar concepts to learn.
Teaching a broad and unfamiliar field comes with pedagogical challenges. Dive into projects too early, and you’re forced to use syntax you don’t yet understand. Delay compelling applications too long, and readers lose interest.
We worked carefully to balance showing “cool examples” without presenting anything that feels magical—i.e., concepts the reader hasn’t yet built a mental framework for.
Our hope is that this work helps formal verification become a more standard part of development and auditing.
Clocking in at well over 60,000 words, this is not a small book. But like any RareSkills publication, it’s information-dense yet approachable, thorough without being academic, and above all, practical and illuminating.
In a space that quickly jumps from one meta to the next, we’re proud to collaborate with a company willing to invest in long-horizon projects that make Web3 safer.
Link in the reply.
⚡️⚡️ IronsideSec ⚡️⚡️ retweeted
Q) How can I work on private audits with @cyfrin ? (50+ auditors DM'd this question)
To join full-time you must have provided great value on our private audits as an Eagle contractor.
To become an Eagle contractor you must have a stacked portfolio of existing work.
⚡️⚡️ IronsideSec ⚡️⚡️ retweeted
1/ The Contest Academy - Bug Deep Dive #1
0xsimao.com/blog/bug-deep-di…
⚡️⚡️ IronsideSec ⚡️⚡️ retweeted
if you check TL, you'll notice most of the devs are talking about erc-8021.
what is it actually?
in simple terms, it is basically a native referral system built on ethereum itself.
so, basically when we use any dapp, we essentially perform txs.
for example, let's say i built a dapp on base. on the frontend i'm showing that there is 100k daily active users but for base itself there is no way to verify how many traffic my dapp is actually bringing on base.
but now, using erc-8021, base chain can track traffic from which dapp and how much traffic is being brought on base and this way base can also incentivize the developer.
so how does it work technically?
1. dev registers their builder code in smart contract registry, linking it to their wallet address. e.g., i registered "base-miniapp"
2. now whenever any user performs any txs on that dev's dapp, the dev will attach their builder code at the end of the tx. so essentially users will submit the transaction along with the builder code onchain.
3. the platform can track where the activity is originating from and at last, revenue is distributed to developers based on the tx volume they generate.
this inspiration actually came from hyperliquid. the og.
anyway, happy weekend 🫴
⚡️⚡️ IronsideSec ⚡️⚡️ retweeted
USDT can be one of the most complicated tokens to integrate with. Most DeFi protocols support USDT, so be aware of these 7 things that could break your protocol
A Thread 🧵👇
⚡️⚡️ IronsideSec ⚡️⚡️ retweeted
💡Top 8 Ways I Use My AI "Amy" Effectively💡
1⃣ Always do first pass manually
2⃣ Ingest Amy's Primer, ask it to analyze the contracts
3⃣ Explain why the false positives it found are invalid
4⃣ Ask it to explain what different functions / bits of code do, then ask it lots of "what if this happens" type of questions
5⃣ Show it some of my own findings then ask it to find similar bugs elsewhere in the codebase (ideally do this 1 by 1, issue by issue not all at once). Explain why false positives are invalid
6⃣ Explain specific attack vectors, heuristics etc & ask it to analyze the codebase with them
7⃣ Explain specific invariants and ask it to break them
8⃣ Ask it to come up with important invariants then try to break them
In my last 2 audits the highest severity, most impactful findings came from Human-AI Symbiosis; from working together with AI to jointly explore, understand & attack the codebase.
Human-AI Symbiosis is the future of many jobs including ours, don't sleep on it.
🧑🔧🤖/acc
⚡️⚡️ IronsideSec ⚡️⚡️ retweeted
1. hey guys 👋
🛡️Introducing SoloAudit — a public-good platform to make solo audits accessible for every Web3 project.
We’re live 👇
soloaudit.com
⚡️⚡️ IronsideSec ⚡️⚡️ retweeted
The root cause of this attack stems from @GMX_IO v1's design flaw where short position operations immediately update the global short average prices (globalShortAveragePrices), which directly impacts the calculation of Assets Under Management (AUM), thereby allowing manipulation of GLP token pricing.
The attacker exploited this design vulnerability by leveraging the Keeper's ability to enable `timelock.enableLeverage` during order execution (a prerequisite for creating large short positions). Through a reentrancy attack, they successfully established massive short positions to manipulate the global average prices, artificially inflating GLP prices within a single transaction and profiting through redemption operations.
The GLP pool of GMX V1 on Arbitrum has experienced an exploit. Approximately $40M in tokens has been transferred from the GLP pool to an unknown wallet.
Security has always been a core priority for GMX, with the GMX smart contracts undergoing numerous audits from top security specialists. So, in this hands-on-deck moment, all core contributors are investigating how the manipulation occurred, and what vulnerability may have enabled it.
Our security partners are also deeply involved, to ensure we gain a thorough understanding of the events that occurred and minimise any associated risks as quickly as possible. Our primary focus is on recovery and pinpointing the root cause of the issue.
Actions taken:
Trading on GMX V1, and the minting and redeeming of GLP, have been disabled on both Arbitrum and Avalanche to prevent any further attack vectors and protect users from additional negative impacts.
Scope of the vulnerability:
Please note that the exploit does not affect GMX V2, its markets, or liquidity pools, nor the GMX token itself.
Based on the available information, the vulnerability is limited to GMX V1 and its GLP pool.
As soon as we have more complete and validated information, a detailed incident report will follow.
⚡️⚡️ IronsideSec ⚡️⚡️ retweeted
Over a year since my last audit. And yet I took 1st in @sherlockdefi's LayerEdge contest.
But this time, I had a secret weapon. One that made the audit pure bliss from start to finish
1/n
⚡️⚡️ IronsideSec ⚡️⚡️ retweeted
he's right, the real fun begins..
if you thought EulerSwap was cool, prepare yourself for AaveLoopSwap:
github.com/deadrosesxyz/Aave…
inspired by EulerSwap, I forked it and created the ultimate product for loopers:
- Get your regular Looping APY
- Get up to 9x AMM fees on your principal
how does it work?
The liquidity providooor opens up a 90% LTV Looped position (assuming with PT tokens) on AAVE and splits the debt between USDC and USDT.
Anyone who wishes to swap simply repays part of the debt in USDC and borrows more in USDT (or vice versa)
This way, with $100k principal a LP can:
- Get interest on up to $1m PT tokens (and pay fees on $900k debt)
- Get LP fees on $900k worth of stables.
It's also made as a UniV4 hook, so it will be feesmaxxing. capital efficiency at its finest.
now im not that much of a math guy, but at looping rates at average of 25% and regular LP APR at 4% on your principal... this will be yielding ~60% APY on stables at size.
the code is unaudited, so its probably not a good idea for anyone to use it right now. though, i'm looking for degens willing to test in prod.
EulerSwap serviced a $3.3m swap on $250k liquidity shortly after this tweet.
Capture the flag competition from @cantinaxyz ends in 9 hours.
If no one captures that flag, then the real fun begins.






























