ETHSecurity Community

For anyone interested. I did a deepdive on Open AI's codex security. TLDR: It's a small stack of skill files and some JS code that starts a large number of Codex sessions. They all get the prompt and the same scope with a limited set of tools. Not one prompt in the repo contains security advice, performance is obtained only through scaling number of agents looking at the code https://x.com/GustavHartz/status/2084926544800035266?s=20

July’s biggest loss came from a 2021 Coldcard entropy issue (>$110M), not from any DeFi protocol, full breakdown here https://x.com/QuillAudits_AI/status/2084278441612845437

Hey all We just launched https://ozone.cecuro.ai that continiously reviews every GitHub pull request for security flaws and learns from the issues you fix and ignore every night - similar to what OpenWiki. Does not matter if it's an API, ios app, or smart contract. It works like an AI security engineer on your team. New teams start with $100 in review credits. Would love to hear what you think!

It appears that BitMart closure is more like an exit scam. I dived into this situation, talked to BitMart clients and people are stuck with 6- and 7-figure deposits, and no withdrawals more than $100 are going through... https://x.com/ceo_hyperfocus/status/2084999613539312069

Most Safe signers only check the hash before approving, that's not real verification, decoding calldata is what we need https://x.com/QuillAudits_AI/status/2085025577589997684

One example: https://runtimeverification.com/blog/from-rust-source-code-to-mathematical-proof

Do anyone know symbiosis finance? Is it legit? It is a cross chain swap...

Is it legit? Yes, I've used it a lot of times while Milkomeda was a thing. I don't know how it went after that, we're talking about 4 years ago at least.

will DM!

🗓 Weekly Web3 Security Roundup | Jul 27 - Aug 2 🚨 Spotlight on 2 notable incidents | ~$88M lost this week Featuring a vulnerability breakdown and in-depth analysis of selected key cases⬇️ https://blocksec.com/blog/web3-security-coldcard-entropy-lula-exploits?utm_source=telegram&utm_content=weekly_blog

BYBIT SUES NORTH KOREA AND LAZARUS GROUP OVER $1.5 BILLION HACK, SECURES ASSET FREEZE ...

tomorrow: NK makes a long range missile test above bybit headquarter

Should we be happy they did not sue Gnosis Safe?

dont give them silly ideas