Security Researcher @quillaudits_ai I Smart Contract Audit | @chainlink DevExpert Learning & acquiring knowledge consistently

Joined May 2022
🥇 secured 1st place in the MorpheusAI contest! 🥇congrats to all and let's keep improving 💪 with the aim of making the web3 ecosystem safer.
Awards have been announced for the MorpheusAI contest🤝 Top 5: 🥇 @turvec_dev - $2664.89 🥈 SovaSlava - $2530.1582328058903 🥉 @0xhals - $2068.79 🏅 @mrpotatomagic - $1952.28 🏅 @iamandreiski - $1908.08 (1/2)
6
1
52
8,772
Also new: 🌍 Pay in naira, cedis, shillings, rand, dollars, pounds, or euros, whichever currency the hospital's or school's account uses 🌗 Light and dark mode 💎 A fresh new look heal-the-world.onrender.com
You asked, we listened 🫡 Heal the World now covers: 💊 Hospital, clinic & pharmacy bills 🎓 School fees 📚 Student loans Every bill is checked with whoever is owed, and you pay them directly. Never the person.
1
4
102
You asked, we listened 🫡 Heal the World now covers: 💊 Hospital, clinic & pharmacy bills 🎓 School fees 📚 Student loans Every bill is checked with whoever is owed, and you pay them directly. Never the person.
Saw this meme trending today👇 and vibecoded something similar out of Sunday boredom, but a more realistic one. It's called Heal the World 🌍 Across Africa, people are dying from illness and poverty, and the heat waves and Ebola outbreaks are making it worse. We can't wait for a miracle. We have to be the miracle for each other. What it is: Patients or hospitals upload real medical bills. Each one is checked with the hospital to confirm it's genuine and still unpaid. How it works: Scroll through the bills and pick one to clear, in full or just part of it. You pay the hospital directly by bank transfer, never the patient, so nobody can scam you. No middleman. Just humans helping humans. 🤝 👉 heal-the-world.onrender.com Pay one bill, share this post, or send it to someone who needs help with theirs. ❤️ For those who need medical help, ask your hospital to upload your bill here.
1
6
1
18
39,731
Saw this meme trending today👇 and vibecoded something similar out of Sunday boredom, but a more realistic one. It's called Heal the World 🌍 Across Africa, people are dying from illness and poverty, and the heat waves and Ebola outbreaks are making it worse. We can't wait for a miracle. We have to be the miracle for each other. What it is: Patients or hospitals upload real medical bills. Each one is checked with the hospital to confirm it's genuine and still unpaid. How it works: Scroll through the bills and pick one to clear, in full or just part of it. You pay the hospital directly by bank transfer, never the patient, so nobody can scam you. No middleman. Just humans helping humans. 🤝 👉 heal-the-world.onrender.com Pay one bill, share this post, or send it to someone who needs help with theirs. ❤️ For those who need medical help, ask your hospital to upload your bill here.
There should be an app where you upload your bills and bored billionaires swipe right to pay them.
4
3
2
13
42,932
🔐 QuillAudits at DeFi Security Summit! We’re excited to have @kalp_eth, @cryptanu and @turvec_dev representing QuillAudits at @summit_defi. From invisible circuit exploits and quantum-safe blockchain security to Damn Vulnerable Daml, our auditors are bringing real-world security insights to the stage. See you at DSS, Nov 1–2. 🛡️ #DSS #DeFiSecurity #QuillAudits
5
1
28
1,000
As an auditor, I know a small code change can affect assumptions across an entire protocol. That’s what excites me about QuillShield: reviewing each PR with the protocol’s full context, bringing security feedback into development while there’s still time to act on it.
8 years of auditing smart contracts. Thousands of findings. And the same pattern every time: the code was done, the audit was next, the launch was waiting. We built something that reviews the code while it's still being written. First look at QuillShield. The most powerful AI security reviewer for onchain code we've ever built. It reviews every pull request with the full context of your protocol, starting from a complete audit of it. Opening a small beta. DM for access.
1
14
302
Excited to announce that I will speak at DSS this year in Mumbai on 1–2 November. In my session, I will explore five layers of blockchain security exposed to quantum threats and why post-quantum signatures alone won’t make a blockchain quantum-safe.
Closing the October 3 DSS speaker slate: @turvec_dev “Quantum-Safe Is Not Just Post-Quantum Signatures: The Five Other Layers Quantum Actually Breaks in Blockchains” Explore the talk and add it to My agenda: defisecuritysummit.org/2026/… Tickets: luma.com/9qtxqqxx
4
5
23
403
Closing the October 3 DSS speaker slate: @turvec_dev “Quantum-Safe Is Not Just Post-Quantum Signatures: The Five Other Layers Quantum Actually Breaks in Blockchains” Explore the talk and add it to My agenda: defisecuritysummit.org/2026/… Tickets: luma.com/9qtxqqxx
1
5
1
22
1,061
One thing that still surprises me in Web3 is how much effort we put into securing smart contracts while some of the most sensitive credentials in a project are still passed around in .env files. API keys, RPC credentials, deployment secrets… And once multiple devs are working on the same project, you eventually hit the question: How do you actually share .env variables securely without exposing the secrets themselves? I've seen devs ask this more than once. For something this common, there really should be a better default than Slack/Telegram, shared files, or whatever workaround the team comes up with. Turns out @urbandev__ has been building exactly that with Enver. → .env encrypted locally before leaving your machine → Shamir's Secret Sharing for key recovery/access → Backend only sees encrypted data, never plaintext secrets → Open source + CLI Really glad to see someone tackling this problem properly. docs.enver-os.xyz/introducti…
How do you guys usually share .env variables safely when working on a project together?
1
1
6
444
12 projects. 155 findings. 0 missed deadlines. That was August at QuillAudits 🚀 5 critical 24 high 42 medium 50 low 34 informational All 155 reported to the team, all 155 resolved before sign-off. Shipping in Q4? No audit booked yet. Talk to us soon . September is already filling up 👇 calendly.com/akshadh-a-quill…
14
6
2
39
3,027
August was one of those months where you just sit back and feel genuinely proud of the team. Our audit team @QuillAudits_AI absolutely crushed it: ✅ 12 projects audited - all delivered on time 🔍 155 findings identified Huge kudos to @kalp_eth, @Pro___King1,@phoenix244001, @cryptanu, and @turvec_dev for the exceptional work and relentless commitment to securing Web3. Hats off to you all. On to the next one....
3
6
3
25
1,812
Victor Okafor retweeted
Glad to complete my first move audit engagement. I only had 2 weeks to learn it from scratch and implement the skills. More refines to go. More tech stacks to go ! Huge shoutout to @AkshayBabhulkar and @turvec_dev !
1
2
14
555
Join us for Tokenized Finance: Rules & Risks @QuillAudits_AI - a working forum in Dubai on September 10🚀 📍 Dubai 🗓️ Thursday, September 10, 2026 ⏰ 10 AM–1 PM GST Tokenized Finance. Real talk. Big ideas🥷 🔗 Register: luma.com/49x1vept
1
5
232
At @QuillAudits_AI this week, We Just finished auditing Move vaults Contracts which is getting deployed on @movement_xyz . Movement chain is a bit different, it needs attention. Kudos to @phoenix244001 and @turvec_dev for going deep into the Move language and Movement chain architecture. We found 16 issues. Here’s what we checked 🧵
1
5
23
499
Completed the security audit for @MSTBlockchain MST Chain is an EVM-compatible Layer 1 blockchain designed for high-speed (4,000+ TPS), low-cost transactions using a Proof of Stake Authority (PoSA) consensus. Built for enterprise-grade applications, it powers use cases across fintech, supply chains, digital identity, and beyond. The audit is now complete, helping strengthen the network ahead of continued ecosystem growth. Read the full audit report 👇 quillaudits.com/leaderboard/…
6
7
1
37
879
Been thinking about this a lot after the recent wave of hacks. Almost every one traces back to key compromises or off-chain access, not code bugs. Maybe this was the missing piece all along; no admins means the only attack surface left is the code itself. Back to "code is law."
Replying to @shafu0x
don’t have admins = 80% security improvement not exactly rocket science
1
2
14
1,046
We've started our security review for @MSTBlockchain . We're diving into the protocol and infrastructure layer to assess security, reliability, and network behavior across the updated implementation. Excited to work alongside the team as they continue building. Looking forward to digging in and sharing our findings when the review wraps up
4
10
50
1,552