P057-CRyP704n4rcHY Building with @LidoFinance | Tweets are NFA | DYOR
Bermuda
Joined June 2014
- Tweets6K
- Following733
- Followers433
- Likes24.2K
EM retweeted
I am not sure how relevant the rice theorem is for users. The hardest part in FV is coming up with specifications. Proofs can be generated by LLMs and with some human effort.
The roundtable happened 🏏
Table 08, in cricket jumpers: auditors, researchers, protocol and bug bounty platform folks. We wrote down the problems, argued the fixes, and read them back on stage.
Here's what we came up with 🧵
🤖 Made with AI
Honored to lead the Fixing Bug Bounties in the Age of AI roundtable at the Ethereum Forward Defence Summit 🛡️
📍 Mumbai, Devcon side event
📅 Nov 4
Limited seats, approval-only: luma.com/vwmfpmaz
Hosted by @safe and @LidoFinance, supported by @ethereumfndn
Who fixes what:
1. Protocols: publish the reward formula, stats, rules and a goodwill path. Make regular triage a duty, running own context-aware evergreen pipeline.
2. Platforms: two-stage submission. Agent pre-check; pass is free, flagged pays a fee. Support secure agent-to-agent triage with protocols.
3. Whitehats: use the report formats that platforms and protocols share.
Agents assist, people decide.
Next:
I hope to carry some of this into how Lido's bug bounty evolves, and report back on what works.
Curious how other programs handle it, and who wants to try this with us.
Thanks, Table 08, @safe, @LidoFinance, @ethereumfndn.
EM retweeted
ETH matters now more than ever.
Bitcoin is outdated, and is dominated by mining cartels.
Ethereum is censorship-resistant, decentralised and transparent.
I hold my stables on Ethereum, not Bitcoin.
Heck, I even hold my Bitcoin on Ethereum, not on Bitcoin.
EM retweeted
Most of CT is dunking on Devcon Mumbai, but working in security it felt the opposite.
Protocol teams building internal custom security harnesses, and firms like @ack3ai or @Certora shipping new open-source AI tooling.
Maybe not a lot happened for the broader crowd, but for security folks this was a big move.
⬜️
EM retweeted
would love to talk to someone managing daybreak and safety classifiers at openai about ethereum critical infrastructure. there is a lot of nuance that makes daybreak blue in its current form useless for it, perhaps even worse than non-daybreak models in terms of refusals. things like network clients and smart contract compilers need to be hypersecured too!
EM retweeted
ethereum pitch: let’s put immutable contracts into a mutable computer
PSA: Please verify that your contracts are still working after Glamsterdam! We created a repository with Invariants that will be broken after the fork, so you can verify for yourself.
blog.ethereum.org/2026/11/06…
EM retweeted
Devcon 9 is coming to Lisbon! 🇵🇹
October 11–13, 2027
Building on Mumbai, we're bringing Ethereum's builders together with more friends and allies working toward a freer, more open internet.
EM retweeted
Lido launches token swaps on Ethereum, Arbitrum and Base, powered by CoW Swap, with added Chainlink price protection for larger trades.
@LidoFinance
Great keynote by @d_gusakov from @LidoFinance at the Ethereum Forward Defence Summit (xitter.gq/safe/status/2117863874…):
Audit: 1 layer × 1 moment
⬛⬛🟩 contracts
⬛⬛⬛ off-chain
⬛⬛⬛ UI
Evergreen: every layer × every moment
🟩🟩🟩 contracts
🟩🟩🟩 off-chain
🟩🟩🟩 UI
Lido started Evergreen🌲
Have you?
The Ethereum Forward Defence Summit is live in Mumbai. 🏏
Keynotes and closed-door roundtables on security, hosted by @safefndn and supported by @ethereumfndn and @LidoFinance.
Clips from the room all day 🧵
EM retweeted
"The risks of staking aren't that high, we haven't seen any major slashings"
We set up the game to incentivise hoarding stolen keys and causing the most terrible outcomes for max leverage. This was probably a bad idea. Imo it's also obscuring the amount of key thefts and making slashings more severe.
Don't sit around and wait till someone gets wrecked to act; it could be you. Ensure your stake runs on Stage 1, no single point of failure staking setups only.
ALT Survivorship bias image highlighting that we don't see the key thefts that don't get slashed.
"I think more [operator] keys have been stolen than are visibly slashed."
@OisinKyne has run Ethereum staking since Genesis. This is the risk that keeps him up at night, and why.
EM retweeted
Gearing up for one of the best side events in Mumbai for the DevCon week.
Roundtables and workshops. All to go on the offensive with defensive security.
With @ethereumfndn 1TS, @LidoFinance and @safe
EM retweeted
The best event I attended during Devcon in Mumbai is Ethereum Forward Defence Summit. By far. Top notch people and fresh topics. Thanks to the organizers!
Let's see if something beats it this week..
EM retweeted
The Ethereum Forward Defence Summit is live in Mumbai. 🏏
Keynotes and closed-door roundtables on security, hosted by @safefndn and supported by @ethereumfndn and @LidoFinance.
Clips from the room all day 🧵
EM retweeted
Gmumbai. Where to find us today 👇
09:30-17:30 Ethereum Forward Defence Summit 🏏
10:50 Making multisigs @safe with forward defence – @rsquare
11:20 From vanity to poison: the evolution of address poisoning attacks – Tong & Varya
14:30 Everyday privacy practices in a high-surveillance environment – @wordsgirljul
15:00 Top hacks since Devcon SEA - what did we learn? – Nick with Matthias & Mudit
15:40 Design for the compromised signer: bounding blast radius in smart accounts - Dev Pramoth
