For too long, high-quality security audits were a privilege reserved for well-funded projects Not anymore We’re proud to announce that we got to audit @cloak_ag, a @colosseum backed privacy project Within the first 2 hours, we identified a critical vulnerability and worked with Cloak to patch it immediately. Funds are SAFU. To support the next generation of Solana builders, we’re offering: > 1 FREE full security audit for the next Colosseum Grand Prize winner > 50% OFF security audits for every team accepted into the next Colosseum accelerator batch (full audit for only $2.5k) AI has changed the game. Hackers find vulnerabilities faster than ever Security needs to evolve just as fast. We are Proof of Exploit, and we make security accessible to every builder on @solana

It is, this chart shows the amount of new vulnerabilities found in software. This changes everything

We won @islanddao V4 Now we're back for V5, but as a sponsor Full circle. Good to be back.

6/ The demand is real. Cohort 1: We audited 4 projects through @islanddao and found vulnerabilities in all of them Cohort 2: We're now auditing 4 more projects in collaboration with @SuperteamBR One of them is @cloak_ag, privacy rails on Solana, already live on mainnet with millions in volume and backed by @colosseum

5/ What we shipped during Colosseum: → Rebuilt the human-in-the-loop auditing process → An AI assistant to help researchers investigate vulnerabilities → 5 new security tools and Pinocchio support → Parallel audit runs and improved efficiency → Root-cause grouping to make findings more actionable The goal: combine AI's speed with human security expertise, for efficient and high-quality audits

4/ Since then we haven’t stopped building, and we’ve been travelling all over the world. We gave a security workshop together with @SuperteamTH and just spent 2 weeks in The Garage with @SuperteamBR, building day and night. Big thanks to @shimas_sol, @kukasolana and @kauenet for making it happen

3/ 4 months ago, none of this existed. @SyotoshiX quit his job as an ethical hacker, having found 500+ vulnerabilities, sold his apartment and flew to Thailand @RegiRegiRegi123 left his job as a security architect after 7 years securing blockchain systems for banks and defence We met by coincidence at @IslandDAO, teamed up, and won the hackathon

2/ Founders have two options today: - A manual audit they trust but often can't afford, costing up to $50K - An AI auditor they can afford but may not fully trust So many early-stage projects ship to mainnet without a proper audit We want to change that. Our offer? Trusted and affordable audits for Solana. $5K flat. A human researcher leads every audit, while our AI security engine does the heavy lifting

4 months ago we both quit our jobs to build something we believe in Met by coincidence, won a hackathon, and never stopped building We just submitted Proof of Exploit to @colosseum 🔓 Here's what we've built, why we built it and how we got here 🧵

It's demo day @ The/Garage And it is completely packed 🔥 A day filled with pitches from the many talented Brazilian builders 🇧🇷 @SuperteamBR

The/Garage at 01:30 AM 🌙 The builders are still locked in for @colosseum Interviews, discussions, workshops, coding sessions @SuperteamBR never sleeps

Something is cooking 👀, stay tuned

Getting valuable insights during the/Garage sessions at @SuperteamBR 🇧🇷 The builders here are locked in and pushing hard for @colosseum

⁠Three weeks ago we were in Bali. Working from our villa every day, ordering food in, laptops by the pool Locked in, barely leaving the villa Then @RegiRegiRegi123 jumped on a call with @shimas_sol, just catching up ⁠By the end of it, he had me completely convinced: we had to come to the Garage in Brazil 🇧🇷 It was 11pm. @SyotoshiX was still working, with his laptop by the pool in the dark "We need to go to Brazil" ⁠He looked up from his laptop. "What?" ⁠Two minutes later, he was convinced and we booked the flight the next morning ⁠Five flights later (Indonesia → Bangkok → Vietnam → Netherlands → USA → Brazil), we're at the @SuperteamBR Garage Thank you @kukasolana, @shimas_sol and @kauenet for the spontaneous invite and for treating us so well ⁠We have big things cooking for @colosseum and Superteam members. Stay tuned.

Millions of dollars in NFTs were vulnerable until a whitehat hacker @0xQuit took it upon himself to rescue them! Here is the story: A massive hack just took place via the @MagicEden NFT marketplace A bug in an old smart contract used by the marketplace, allowed hackers to use an old wallet approval from users to steal their NFTs and approved balances! The marketplace itself was already gone, but the wallet approvals users granted years ago were still sitting onchain That meant NFTs could be pulled from those wallets without the owner signing anything new After a few initial reports, the scale started to become more obvious, this was not a one-off theft It was an open door across a huge set of leftover approvals On the newer version of the contract an emergency pause could be triggered but this was not possible on the older version of the contract @0xQuit quickly realized this and started going to work in a race against the malicious hackers The goal was simple, steal the vulnerable assets and secure them before the malicious hackers could do so By morning, the whitehat managed to secure more than $5.7M in NFTs Unfortunately the malicious hackers realized not only NFTs but also approved WETH and USDC balances could be stolen The total reported theft (beyond the rescued NFTs) has been estimated at $2.8M+ but would have been significantly bigger without the hero whitehat hacker coming to the rescue!

The future of Solana just changed because of a few last-minute calls by @mert In case you missed it, @solana wrapped up a governance fight and one of the proposals came down to a hair Here is what happened: > The first proposal changes voting for Solana: who gets a say & what it takes for a change to go through It passed quickly > The second proposal was the real fight. It reduces the amount of new solana:So11111111111111111111111111111111111111112 printed per year for staking & validator rewards > Hours before the deadline it was still short. Then @krakenfx’s big validator flipped from no to yes, Galaxy moved with it, and Mert kept calling until the votes landed In the end the vote passed with 67%, just 0.33% above the threshold! > The third proposal wanted to change fees so the network would burn a lot more SOL It failed after too many people sat it out or disagreed Solana now has clearer rules and a path to print less SOL, but the big daily burn is off the table This goes to show how the last few votes on a proposal can change the course of direction for the entire network