Security Researcher @cantinaxyz 🔍 | Will audit for treats 🐾
Joined December 2016
- Tweets87
- Following1.1K
- Followers483
- Likes1.2K
silverologist retweeted
For who maybe is not familiar with this attack vector, these use the .vscode autorun tactic.
In this case, the malware is added here:
xitter.gq/0xhyh/status/206670474…
github.com/tharwa-fi/contrac…
(report repo when you have time pls)
Be careful, scammers have AI and @Google doesn't filter it out (letter: boilerplate text, github and solodit profile mentions, and click-my-link)
silverologist retweeted
Just kicked off a new audit for an extension to a complex DeFi strategy system.
Good protocols don't treat audits as a one-time checkbox. Every production change deserves a security review.
From first contact to audit kickoff: < 24h.
Security doesn't end after the first audit.
silverologist retweeted
1/3
We're consolidating and migrating some of our older technical articles to the Cyba blog.
cybasecurity.io/blog
Two recent additions worth revisiting:
silverologist retweeted
After years of working in security, I've launched Cyba Blockchain Security @cybasecurity
This is a long-term commitment to building security properly; beyond audits, beyond reviews or tooling alone.
Long road ahead, but this is the right one for me.
xitter.gq/CybaSecurity/status/20…
1/3
Cyba Blockchain Security is now live.
Cyba (pronounced sai-ba) is a researcher-led blockchain security firm focused on manual audits, deep protocol reviews and practical security research.
Founded by @abarbatei, with 10+ years of security experience across Web2 and Web3.
cybasecurity.io
silverologist retweeted
Learning cryptography for Web3 Security turned out to be way easier than I expected.
At first, I thought I had to understand every formula and proof.
But like most things in crypto — you only need the core concepts that actually appear in real audits and protocols.
This thread is my path to learning crypto for Web3 Security 🧵
silverologist retweeted
A friend of mine wants to get into the world of MEV. He has already started working on an arbitrage bot and asked me for resources.
Can you guys please suggest me any resources you have on this?
Over time I did bookmark/save some MEV related stuff but it's just a dump. I'm sharing it here also as a starting point.
MEV IRT attacks: xitter.gq/EigenPhi
MEV bot templates/code
xitter.gq/DeGatchi/status/157754…
xitter.gq/0xAlcibiades/status/15…
Research/articles on MEV
galaxy.com/insights/research…
xitter.gq/_prestwich/status/1607…
xitter.gq/0x_emperor/status/1567…
xitter.gq/LogarithmicRex/status/…
galaxy.com/insights/research…
github.com/flashbots/mev-res…
MEV related random posts
xitter.gq/cryptotriv/status/1707…
xitter.gq/Mudit__Gupta/status/16…
xitter.gq/metachris/status/15667…
xitter.gq/binji_x/status/1549450…
xitter.gq/noxx3xxon/status/15465…
xitter.gq/MevRefund/status/15374…
xitter.gq/degensec/status/151607…
xitter.gq/ThogardPvP/status/1508…
xitter.gq/FejLeuros/status/14893…
xitter.gq/pessimistic_io/status/…
Recently, @moo9000 has asked if @arbitrum is still MEV free or if someone had finally found a way to do sandwich/front run, bypassing the centralised sequencer, so we collected more resources on this topic!
Check out: blog.pessimistic.io/arbitrum…
No short answer 👀
silverologist retweeted
Happy to publish the audit report for @LiquifyVentures's new product!
Together with @silverologist, we audited this new borrowing and lending protocol to ensure user safety!
I can say, that the Liquify team is in a constant building state🔥🔥🔥
Even more reports soon!
silverologist retweeted
Here’s a table showing how major L1s and L2s differ on mempool visibility, TX ordering and block times.
These design choices shape MEV risk, user fairness, and speed. They also determine how secure, fast or exploitable a chain really is.
Study that.
arxiv.org/pdf/2501.17335
silverologist retweeted
Before you ship that Uniswap v4 hook, ask yourself:
1. How many pools will call it?
2. Does it call PoolManager?
3. Does it `modifyLiquidity`?
4. Are swap callbacks symmetric?
5. Does it handle native tokens?
6. How’s access control done?
Full article:
blog.openzeppelin.com/6-ques…
silverologist retweeted
A further step in securing @LiquifyVentures's ecosystem has been finalized!
Every change, however small, should always be secured; as it was in this case: a small upgrade to an existing component.
Again, myself and @silverologist audited this change to ensured user safety 🔒
silverologist retweeted
A further step in securing @LiquifyVentures's ecosystem has been finalized!
Every change, however small, should always be secured; as it was in this case: a small upgrade to an existing component.
Again, myself and @silverologist audited this change to ensured user safety 🔒
silverologist retweeted
Our Unified Bridge Contract was audited by based devs
Huge thanks to @abarbatei & @silverologist 🛠
Security is at the core of everything we do at Liquify, and this report ensures our protocol is ready to unlock liquidity across multiple chains.
Stay safe. Stay liquid 🌊
silverologist retweeted
Happy to share the report for @LiquifyVentures's Unified Bridge contract 📝
Myself and @silverologist audited and ensured that this key component of their ecosystem meets security standards! 🔒
silverologist retweeted
🎉 Secureum RACE-40 Results
💨 Number of Runners: 62
⚖️ Median Score: 4/8
🥇 Top Score: 7.5/8
🙏 Designer: @p_misirov
✍️ Reviewer: @patrickd_de ventral.digital/posts/2025/5…
🏆🏆 Top 32 Leaderboard 🏆🏆
silverologist retweeted
The week’s almost over, but not before you meet our newest Apprentice in the Cantina Fellowship, @silverologist 🪐
silverologist retweeted
Happy to have the @iLayer_io audit report published!
Myself, @czm_alex and @silverologist audited their new cross-chain, intent-based orderbook and @LayerZero_Core integration.
Audit alpha: @czm_alex found a very interesting issue with the fill logic, check [H-02] out!
A pleasure working with the team!
Report🔗: github.com/abarbatei/audits/…
silverologist retweeted
The @BadgerDAO standouts are in! Check out the results. 🪐
Your top 3 ranked researchers are:
🥇 Abdullahi & Yas000X: $3,545.81
🥈 @__mrkaplan& tonips: $3,371.70
🥉 @Stormr3ckson: $3,341.99
Thank you to everyone that participated! Full leaderboard below.
silverologist retweeted
me and @silverologist just finalized a 2 week long audit with @AccountableData
We had the opportunity to review and secure an early version of their future ERC7540 vault implementation.
This goes to show, that teams that value their users conduct audits early on in development
silverologist retweeted
When I started researching Rollups for my thesis, I didn’t expect it to be so hard to find deep technical explanations.
Most articles just scratch the surface—basic definitions and high-level differences between Optimistic & ZK Rollups.
If you ever want to dig into how Rollups actually work, here are the best resources I found: 👇