Vivan Chauhan

🚀 Safe Edges is heading to @EFDevcon Mumbai Let's catch up from November 3–7. Looking forward to connecting with builders, founders, and the Web3 community. See you in Mumbai! 🤝

Binance’s $6.3B security incident. what we know so far. We cover all currently known details about the Binance hack, from the attack timeline to fund movements and preliminary findings. Read more blog.safeedges.in/binance-6-… #safeedges #BinanceHack

Update ⚡️Bastion Security has crossed 2,000+ downloads on OpenVSX and our latest update adds detection for vulnerable PHP versions. Activate Bastion Security in your IDE, and it will flag known vulnerable PHP versions in your development environment. Built by Safe Edges, Bastion Security helps developers identify security risks directly within their development workflow, including: • Private key and seed phrase exposure • Credential leaks • Supply chain risks • Risky patterns in AI-assisted workflows through AI Guard • Vulnerable PHP versions All analysis runs locally on your machine, keeping sensitive code and credentials within your system. What started as an internal tool to catch security issues earlier continues to grow through community feedback, improved detections, leak free, and performance enhancements. Thank you to everyone who has installed, tested, reported issues, and supported Bastion Security. 2,000+ downloads and counting. More improvements ahead. open-vsx.org/extension/safee…

Worst day for cybersecurity. Multiple zero-days, supply chain compromises, and ongoing active exploitation reported across the industry. GitLab: CVSS 10.0 remote code execution vulnerability. Railway: Customer secrets and private keys potentially exposed. QUIC: Reported zero-day vulnerability. PHP: Two critical unauthenticated RCE vulnerabilities under active exploitation. LiteLLM: Backdoored release stealing cloud, SSH, and AI credentials. eMudhra: Weak certificate authority keys exposed users to certificate forgery risks. Node.js, Next.js, React: Critical RCE and TLS security vulnerabilities. TiDB Cloud: Breach involving stolen credentials and customer data exposure. Plex2Shell: Exploited within hours, deploying cryptominers and backdoors. BeyondTrust and Ivanti: Actively exploited zero-days added to CISA's KEV catalog. Railway Customers are reporting that their private keys and data are circulating

Ethereum Glamsterdam upgrade is moving to Sepolia. The Sepolia testnet activation is scheduled for October 6, 2026, at 13:53:36 UTC. Glamsterdam brings several protocol-level changes, with two of the more notable ones being: Enshrined Proposer-Builder Separation (ePBS): Brings proposer-builder separation into the Ethereum protocol itself, changing how block building and proposing are handled. Block-Level Access Lists: Introduces access lists at the block level, specifying the accounts and storage slots that transactions in a block will access. This is designed to make execution dependencies more explicit and support more parallel processing. The Sepolia rollout is an important step in testing these changes before the upgrade moves further toward mainnet. Worth watching closely if you're building or researching around Ethereum execution, MEV, and protocol security. blog.safeedges.in/the-most-c…

Now the industry is becoming increasingly dependent on AI, and AI security must become a major concern. The recent incidents involving Hugging Face and OpenAI show that we need to rethink our perspective: we desperately need security for AI. This is why we’re investing heavily in AI agent security and working with our partners to secure their AI agents before they can be exploited in production.

Safe Edges is now the Strategic Security Partner for the @X1_EcoChain ecosystem. X1 is an EVM-compatible L1 running Proof of Nodes, with validators on 4-core, 4GB, low-power hardware rather than datacentre rigs. A validator set shaped like that changes the assumptions around participation, liveness and reward accounting. Gas from every transaction is redistributed at the protocol level, 90% across validator wallets and 10% to genesis. Custom economic logic like that is where the findings that matter usually sit, not in the parts a generic checklist covers. For teams building on X1 that means full Solidity coverage on contracts and dApps, plus pen testing across the frontend, API and RPC surfaces, at ecosystem rates and a priority queue. #SafeEdges is here to secure every team building on X1.

We're talking about agentic finance for a long time. Coinbase has now launched AI Finance (AIFi), where agents can autonomously decide where to pay, how to pay, and how much to pay. But the big question is security. We’ve been researching autonomous agentic security closely with our clients to secure the whole flow. We need to give this extra attention. otherwise, it’s going to become a huge challenge.

Autonomous agents are entering Web3 and finance fast. But what happens when a malicious prompt makes an agent sign a transaction or move funds? Could agent security become Web3’s next major security crisis? I wrote the full deep dive.

Safe Edges is now the Official Security Partner for the @ENI__Official ecosystem. ENI is building enterprise-grade infrastructure where AppChains and the projects on top of them multiply over time. Every one of those chains carries its own execution environment and its own security surface. ENI runs Cosmos SDK and Tendermint with an EVM layer that diverges from Ethereum in ways that break standard assumptions. PREVRANDAO returning a block-time hash. COINBASE mapped to the fee collector. IAVL state instead of MPT. Auditing here means auditing against those divergences, not against a generic EVM checklist. #SafeEdges is here to secure every team building on ENI

In our last week at WebX 2026 in Japan 🇯🇵, we're honestly amazed by the energy of Japan's crypto ecosystem. The DeFi community here is incredibly mature, innovative, and genuinely focused on building. Every conversation has been insightful, and we've met founders, researchers, investors, and security teams who are pushing the industry forward. Over the past few days, we've built many valuable connections and promising partnerships. Looking forward to collaborating with the amazing people we've met here. Bullish on Japan. 🇯🇵🚀 The future of Web3 innovation here looks incredibly strong. Thank you, Japan! @WebX_Asia @coin_post #WebX #WebXJapan #Crypto #DeFi #Web3 #Blockchain