top 0.01% hackers break your codebase | Trusted by @centrifuge, @zama, @lifiprotocol
Joined March 2025
- Tweets57
- Following5
- Followers706
- Likes105
B612 Security retweeted
Centrifuge V3.3 is about to go live.
As part of our security process before deployment, the release was independently reviewed by @sherlockdefi, @burraSec and @yAuditDAO, with multiple audits covering both the new functionality and its interaction with the broader protocol.
The infrastructure being used by onchain funds and vaults needs repeated review before every release.
B612 Security retweeted
Centrifuge V3.1 has been under continuous review since August. @burraSec just closed out their third and final report ahead of launch.
Security as an ongoing process.
We’ve been working with @centrifuge on a series of security audits since August 2025, ahead of their v3.1 launch. The focus were the cross-chain components of their system.
The team has successfully resolved all the issues!
Check out the reports:
- LayerZero integration: github.com/burrasec/Security…
- Initial v3.1 report: github.com/burrasec/Security…
- Final v3.1 report: github.com/burrasec/Security…
B612 Security retweeted
I’m excited to announce the security partnership between @burraSec & @0xProbable - the onchain prediction market on the @BNBCHAIN.
B612 Security retweeted
Crosschain messaging protocol integrations we have reviewed so far with @burraSec:
- @LayerZero_Core
- @axelar
- @AcrossProtocol
- @wormhole
- @RelayProtocol
- @chainlink CCIP
- @eco
- @gardenfi
Many more to come, keep an eye on our auditing portfolio page github.com/burrasec/Security…
B612 Security retweeted
Starting the week strong by reviewing @RelayProtocol integration that the team at LI.FI has built!
If you’ve ever sent tokens across chains, there’s a 99.99% chance you’ve interacted with LiFi.
They’re the powerhouse DEX and bridge aggregator across a plethora of chains.
I’m thrilled to announce a security partnership between @burraSec and @lifiprotocol.
We’ll be reviewing ongoing changes to their system to ensure top-notch security!
B612 Security retweeted
Check out the latest podcast episode of THE NETWORK PODCAST with @Montyly!
Josselin is a leading expert in web3 security.
He’s built security tools, guidelines, and influenced the direction of the web3 security space through his work at Trail Of Bits.
topics:
- Josselin’s background
- Web2 vs Web3 security
- Scaling Trail Of Bits
- Slither
- The role of AI in security
- Static analysis vs LLMs
- Open source tools and marketing
- Evaluating blockchain security maturity
- Tools and techniques projects should adopt to make their codebase resilient
- Security review vs audit
- Attracting researchers into the space
- Starting a web3 security agency
- Traits that make a great security researcher
- Favorite books / Zero to One | The Coaching Habit
YouTube link below
B612 Security retweeted
Intents are one of the strongest contenders for driving Web3 mass adoption.
But how exactly do they remove UX complexity? How can they abstract away all the cross-chain interactions and logic?
Here’s a sketch I made to illustrate the journey of an intent.
Huge thanks to @burraSec and @octane_security teams for reviewing and sharing their feedback.
Shout out to @windhustler for the insights!
ALT Journey of an Intent
B612 Security retweeted
Staking has launched on app.remilux.xyz
Lock your Remilux. Earn Aura. Compete for prizes.
90d Lock — Eligible for Milady raffle in 10 days
60d Lock — Win exclusive 1/1 Remilux
30d Lock — Raffles include Common, Uncommon & Rare Remilux
Security is a top priority.
We engaged @octane_security to provide an AI-powered security analysis of the codebase along with a manual audit.
@burraSec also provided a manual audit by @windhustler.
B612 Security retweeted
Talking about security with @PancakeSwap on their newest crosschain product built on top of @AcrossProtocol.
How do we make extra certain crosschain swaps are secure? 🛡️
We’re pulling back the curtain with @Burrasec and @Pashovauditgrp to unpack the audits, potential exploits, and best practices in DeFi security.
Tune in June 26, 14:30 UTC.
youtube.com/watch?v=YijAOJOC…
B612 Security retweeted
💡LayerZeroV2 Security Tip💡
Don't rely on the gas limit and msg.value
🫱🏻🫲🏼 All the metadata passed as options to the `Endpoint::send` function is simply an off-chain agreement with the Executor.
The `lzReceive` function on the destination chain can be executed by anyone with a different `msg.value` and gas limit compared to what was specified and paid on the sending side.
There are various ways to enforce certain parameters on the receiving side 🧵🧵🧵
B612 Security retweeted
We're about to partner with one of the powerhouses of cross-chain integrations and interoperability.
I want @burraSec to become your go-to security partner if you're building cross-chain.
B612 Security retweeted
Since launching @burraSec, we've audited cross-chain integrations with Axelar, Wormhole, LayerZero, and Across. We're now crafting a process to stand out from other security firms.
Cross-chain integrations are complex due to off-chain components, and manual reviews often miss edge cases. End-to-end testing on the actual blockchain is critical to uncover real behavior.
Many security reports rely on external protocol documentation as the source of truth, but we believe this is flawed. Instead, contracts should be deployed on-chain, with transactions sent and debugged to reveal true functionality.
RT @windhustler: I’m looking for a BD to drive sales & partnership initiatives for @BurraSec.
If you have a background in Web3/Security,…
