Founder @SoloditOfficial. Co-founder @Cyfrin
hansfriese.eth
Joined April 2022
- Tweets1K
- Following485
- Followers5.9K
- Likes2.9K
Hans🟪 retweeted
Running 7 private audits in parallel (8 total) this week, engaging 16 top auditors 🚀
6/8 of the private audits are for returning clients who have done previous @cyfrin audits, 2/8 are for new clients.
Working hard every day helping keep our clients safe, what a blessing 🙏
Manual review has always been a fun. I still write diagrams manually.
after months, did an manual audit, of my own contracts. reading each line, one by one, audit tags and all.
was fun.
learning is same
ai will get you speed on contracts, but it will add lots of redundant logic for edge cases, making contract very hard to review and make sense of.
for <2k nloc its better you write contracts on your own.
Hans🟪 retweeted
Cheaply paying the whitehat $250K for a critical infinite XRP supply bug when your treasury has billions?
Thanks for helping ensure the next time an attacker exploits it for 9 figures instead of reporting it in good faith.
This is why people do not take XRPL or Ripple seriously as an org….
Hans🟪 retweeted
There are 3 types of auditors who provide value in the new auditing meta; the more of these 3 skillsets you can excel in & combine, the more value you can provide both to your firm & clients:
1⃣ Automator
Skilled in quality data prep & harvest, post-training/fine-tuning, creating effective robust workflows with continuous improvement mechanics, the Automator partially or fully automates the process of vulnerability discovery with quality control resulting in significant security output with high signal-to-noise ratio.
2⃣ Elusive Bug Catcher
Able to find elusive bugs which the Automator can't yet find, the Elusive Bug Catcher continues providing value.
Over time it becomes harder and harder to remain an Elusive Bug Catcher as the clever Automator continues raising the bar by reverse-engineering heuristics, harvesting better training data & creating new workflows to find the formerly elusive bugs.
3⃣ Reviewer
Consuming the outputs of the Automator's creations, the Reviewer uses their auditing knowledge to enhance, refine, correct & upgrade severity of automatically generated outputs, acting as a skilled human filter between the automation and the final output recipient.
Hans🟪 retweeted
Starting this week running 7 private audits in parallel, engaging 20 top auditors!
* 2 Solana audits
* 2 Audits plus Formal Verification
* TradFi/RWA, Lending, Cross-Chain, Prediction Markets, Stablecoins, Smart Wallets
@cyfrin helping secure great mix of protocol types! 🚀
Hans🟪 retweeted
Now that you're all back in the timeline.
I've got a handful of really solid devs that I've worked with over the past 3 years that I couldn't recommend more.
They're AI pilled, love Svelte and are good with the full stack. They got solid infra experience as well.
Please reach out if you're hiring and I'll connect!
Hans🟪 retweeted
BattleChain Mainnet (chain ID 626) and Testnet (chain ID 627) are both live now. ZKSync-based L2, purpose-built for this workflow. AI-native tooling from day one.
We've spent years seeing what happens after audits. This is the missing stage.
Hans🟪 retweeted
Every protocol we've audited faces the same gap. Code goes from audit to mainnet with real money and nothing in between. No staging. No adversarial testing. Just hope.
We built something to fix that. Introducing BattleChain. Trial by Fire. 🧵
Hans🟪 retweeted
Next week @cyfrin running 8 private audits in parallel, engaging 23 top auditors! Great mix of audits including:
2⃣ ZK / Cryptography
2⃣ Rust, Solana / Substrate
4⃣ EVM Protocol audits, 2⃣ with Formal Verification as additional deliverable
Excited to help secure web3 🚀
Hans🟪 retweeted
Happy to share, Cyfrin has wrapped our audit of @0xspiralstake v2, a non-custodial protocol that amplifies yield using flash-loans on @Morpho.
Read the full report 👇
RT @PatrickAlphaC: There are around only 24 hours left to donate to the DAO security fund.
I would like to ask you to please donate to Cyf…