back in the office and already planning Certora’s next moves for @StellarOrg Meridian, @Blockworks DAS London, @solana Breakpoint, @summit_defi, and @EFDevcon. also vibe publishing content, of course (thanks MCPs for making my life easier).
definitely in 7:7:7 mode 🫡
Vercel CEO Guillermo Rauch (@rauchg) says the old work week is officially dead:
“You would think, ‘AI has arrived, & we're all working 2 hours a week.’”
“The opposite is happening. I get text messages at midnight from the CEOs and CTOs of these companies.”
“It’s more like 7/7/7: 7 days a week from 7 AM to 7 PM.”
Great opportunity for my Brazilian hermanos 🤝
We’re hiring a Head of LATAM Product Partnerships at OpenAI, based in São Paulo.
We’re looking for someone who knows the region deeply, loves building longterm, trusted partnerships, and can turn ambitious ideas into things people actually use. This person will help shape how we grow across Latin America. Warning: this is not a cushy tech job. This is a role for an entrepreneurially minded partnerships athlete wanting to make a massive positive impact.
If this sounds like you, or someone you’d love to see in this role, please apply or pass it along.
openai.com/careers/head-of-l…
we’re launching a new section on the @Certora blog called Provable. Certora researchers analyze recent hacks through the lens of formal verification.
First one of the series is already live
Tectonic was exploited on Cronos for ~$120M last month.
We used formal verification to analyze the deployed tTONIC contract and found an exchange-rate flaw used in the attack: direct TONIC transfers could increase the value represented by tTONIC.
The attacker combined this with TONIC price manipulation to inflate collateral and borrow across nine Tectonic markets.
Full breakdown ⬇️
certora.com/blog/provabletec…
Muy buen feature de @Exa_App para salir de USDT a fiat (USD).
Llegó en el día, impecable ✅
🚨 beware of scammers 🚨
Someone tried to hack me.
Yesterday Ash, who I met in Buenos Aires in-person from @Saldasoro, reached out to me on Telegram wanting to catch up. He gave talks at @crecimientoar. He was trusted. It's our existing chat on Telegram. We have message history. I said sure and scheduled for today via his calendly.
Today I joined the Google Meet. He wasn't there. He sent me a link to a different meeting via Telegram, which appeared to be Microsoft Teams. When I joined, I saw a popup immediately appear saying I needed to download an update to the Teams SDK. Red flag.
I could see Ash on the call. The same Ash I remember in person. 2 other asian-looking individuals were also on the call. I took a screenshot of the download popup, sent it to Ash on Telegram, and told him I was not comfortable downloading anything. If it was a blocker for me to hear / speak, I'd prefer we move to Google Meet or another tool that doesn't require downloads.
He replied "that's weird, you probably just need to download the update." I repeated that I wasn't comfortable downloading anything. Our Telegram chat disappears, he leaves the call. It feels like I caught a scammer in the act.
If anyone knows Ash personally, I recommend to be careful communicating with them and verify their socials haven't been hacked. If there are any steps I should take now to make sure my computer isn't compromised, please let me know. That was scary.
Buenos tips para quienes están buscando trabajo
Me ha preguntado bastante gente últimamente por el formato del CV
Yo recomiendo un formato ATS-friendly: LaTeX, una columna, sin gráficos raros y sin foto
Además, experiencia y estudios en orden cronológico inverso, de lo más reciente a lo más antiguo
Intentaría también:
- Describir impacto y resultados, no solo responsabilidades
- Adaptarlo ligeramente al puesto, sin pasarse
- Evitar barras de skills y porcentajes
- Mantenerlo lo más corto posible
Si no estáis muy familiarizados con LaTeX, Overleaf viene genial
fioscan 🤌🇦🇷 retweeted
In an era where code is so often written by machines, specs now become the primary developer-machine interface. That's what we designed CVL for: separating the "what" (specs) from the "how" (code).
Specs actually don't lie, but devs can cheat them. If you add a summary that seems right, but actually sneaks in an assumption about the code, add a rule that makes sure that assumption holds.
In Certora, we guided many newcomers to formal verification on how to write good specs. We encountered ingenious spec writing and also pitfalls people kept falling for.
- `rule_sanity` is an option to automatically check for simply vacuities.
- `invariant` type rules come with a base case automatically discharged.
- Most hooks are type-checked and cannot just stop fire due to renames.
We look forward to studying the specifics of the example to understand this failure.
We built the AutoProver to make spec writing more accessible, with a knowledge base of common mistakes, and some special guardrails for ensuring higher spec quality.
For example, a special sanity analyzer performs one more verification of the rule to produce an "UNSAT core" from the SMT proof, allowing to map which parts of the code were not necessary to prove the rule, highlighting potentially uncovered areas or contradicting assumptions.
Muy muy linda la energía hoy en la Latam Digital Assets Conference 🫶
CUSTODY, COMPLIANCE & SECURITY — LATAM DIGITAL ASSETS CONF
What it takes to hold digital assets at institutional scale. Leandro Pereira from @dfnsHQ, @sarinagowland from @FireblocksHQ and @fiorescan from @Certora covered it, with @brunotorossi from @opsek_io moderating.
un recordatorio para no dar nada por sentado, para agradecer y para estar más presente en la cotidianeidad
stop what you are doing and check this
ordinaryabundance.com/
AI is becoming an increasingly important part of the smart contract security workflow.
If you’re a dev, there’s no excuse not to secure your code.
Meet AI Auditor, the AI-driven auditing engine inside Certora AutoProver.
It analyzes the broader integration context around your code to identify unusual external behavior and determine whether your protocol’s security assumptions actually hold.
Watch the demo by @iamandreiski 👇
"Formal verification is crucial for a future where AI and humanity coexist to make a better place for us all."
Replying to @ethereum
7/ This is why two projects I am affiliated with, @vyperlang and @Sequent_Inc, are betting hard on formal verification.
Vyper is using formal verification to verify language and compiler correctness down to bytecode, and Sequent is building infrastructure for AI and humans to harness formal verification.
I strongly think that formal verification is crucial for a future where AI and humanity coexist to make a better place for us all.
One thing this industry needs more of: remembering there's a human being behind every product.
I had the chance to work with Iz and saw firsthand how much heart, intelligence, and effort she put into POAP. That's the person behind the announcement.
When I announced POAP was winding down, the response absolutely floored me.
People shared what their collections meant to them, reminded us of moments we'd helped preserve, shared pictures of their favorite POAP swag and moments. So many people reached out with a simple "thank you, for POAP".
The vast majority of it was genuinely, overwhelmingly heart warming. Thank you all for taking the time to share your good memories of what we built together. You will forever be part of how I remember this chapter.
Then there was the remainder.
Some people took the opportunity to dunk. Fine. You have no idea what happened behind the scenes, what we tried, or what drove our decision making. Someday I'll share a full postmortem here, but of course you can disagree with how something ended, and give your armchair commentary. That's fair game.
But a specific slice of that remainder, went somewhere else entirely. "Woman founder attaches photo to an announcement, must be looking for attention."
I am, in fact, going to be looking for a new job. Being visible isn't the whole of how you get hired, but it certainly helps. Don't hate the player, hate the game -- and all I can say is, tremendous respect to the various women of CT who have been consistently showing up here to say the things they need to say without dimming their light.
Meanwhile, I'm watching @shawmakesmagic from @elizaOS get torched, and I have to say I genuinely feel for him. Sued by ambulance chasing lawyers after being through the gauntlet of running a token at the pleasure of CT, sacrificing his health and sanity, and here he is getting dragged on the tail end of an objectively hard outcome.
This industry makes an effort to eat its founders either way, with just a little difference in seasoning.
We chew people up and spit them out when things end. That part is equal opportunity. But the way we chew you up tells you something about what the crowd actually sees when they look at you, and that's probably something for all of us as an industry to reflect on.
To the vast majority of you, who remind the builders of the good times when the going gets tough: thank you for making the peanut gallery that much easier to tolerate.


























