Nethermind Security @NethermindSec
Comprehensive security from @Nethermind, from audits to formal verification. Book now: https://t.co/dBDIYbokwP nethermind.io/nethermind-sec… Joined September 2024-
Tweets736
-
Followers2K
-
Following45
-
Likes265
We completed a security review of @arcxtrade, a yield-decomposition protocol on Starknet that settles across chains by bridging USDC into Wildcat markets through CCTP. The review covered the full Cairo and Solidity codebase, with close attention to the token decomposition model and the cross-chain settlement path. The higher-severity findings were fixed ahead of the beta.
The three places contracts read price, and what holds up: nethermind.io/blog/price-man…
In 2024, an attacker manipulated a lending protocol's oracle into valuing a single token at roughly $1.37 trillion. The oracle worked as designed. It derived the price from a DEX pool, and a flash loan moved that pool for a single block, so the reported price was the one the attacker chose. Reading a price directly from a pool is the obvious error, and most experienced teams avoid it. The harder failures are the ones that pass review. A staleness threshold set too high, so an outdated price is still accepted as current. An L2 feed that reads as fresh while the sequencer is down. A TWAP that resists cheap manipulation but lags a fast market enough to leave an exploitable window. Most teams know an oracle can be manipulated. Confirming that the safeguards already in place actually hold is harder, and it's most of what an audit does here.
The codebase was the Bloxchain Protocol by @Particle_CS, a smart-contract framework built so one compromised key can't act alone. Full report: github.com/NethermindEth/…
Everyone's arguing about whether AI replaces security audits. We stopped arguing and ran it: one codebase, three layers, and we tracked what each one actually caught. AuditAgent (our AI scanner, runs while you build) and AgentArena (independent agents competing to break the same code) cleared the high-frequency stuff early. The bugs that show up in codebase after codebase, gone before anyone senior opened the repo. So by the time our auditors started, the easy surface was clean. They spent their time on the bugs you can't pattern-match. Things like an external call that ran before the check meant to authorize it. Design-specific, the kind you only find by reasoning through the whole system. Both camps in this fight are only half right: AI doesn't shrink the audit, it tells the audit where to look. And the audit finds what no scanner ever will. You don't pick one. You run them in order.
It carries context across scans, surfaces more meaningful findings, and you can review and adjust what it remembers. A pre-audit baseline you run while you build, ahead of a comprehensive audit. auditagent.nethermind.io
Most AI scanners start every run from zero. AuditAgent now keeps a per-project memory. Each scan builds on what it already learned about your codebase, so repeat runs get sharper instead of repeating themselves.
Full talk: youtube.com/watch?v=pwdi51…
A ZK circuit can do exactly what it's supposed to and the system around it still gets drained. The risk lives in what the protocol assumes the proof means. Michael Belegris on the bugs our ZK audit team keeps finding: nethermind.io/blog/zk-circui…
Your team takes the break. We take the audit. A few slots open July 1 — August 15. Adjusted rates. AuditAgent Pro included so the codebase is ready before we start. Smart contracts and ZK circuits. nethermind.io/audit-slots
@Uniswap Full case study: nethermind.io/blog/uniswaps-…
Uniswap ran a free AuditAgent scan, an AgentArena competition on UniswapX, and adopted the AuditAgent Business Plan in three months. Cody Born, Principal Engineer at @Uniswap, on what AuditAgent changed in their development workflow:
@0xKalzak Pre-audit tools handle the surface layer. AuditAgent flags common vulnerability patterns and dead code so the audit goes deeper from day one. Included with audit slots between July 1 and August 15. Reduced rates: nethermind.io/audit-slots
Full guide on audit prep from @0xKalzak: nethermind.io/blog/you-think…
Auditors aren't QA. When the first days of an engagement go to integration bugs the team would catch on testnet, that's time off the review. When pass one goes to dead code and common vulnerability patterns, that's time not spent on bugs only auditors can find.
@lagoon_finance Sequential audits caught these before production. One audit at one version wouldn't have. Case study: nethermind.io/blog/securing-…
@lagoon_finance The work covered pending-state accounting transitions, NAV update timing during synchronous deposits, and economic edge cases at feature interactions. The most consequential issues became reachable only when new features layered onto existing ones.
Auditing ERC-7540 vaults is different from auditing ERC-4626. Settlement happens in a different block than the request. Bugs in the gap can leave users mispriced, locked out of exits, or settled into the wrong cycle. Standard audit playbooks miss them.
Jelleo @JelleoLabs
204 Followers 91 Following Continuous Solana program audits https://t.co/3a3WMiu78P
KIRILL @Copenhagen0x
5K Followers 179 Following God is great Founder & CEO @JelleoLabs - continuous @Solana audits
Marco Ochoa @ochoa68918
5 Followers 86 Following
Alejandro Betancourt @Ale_Beta
19K Followers 16K Following Web3 × AI Engineer · Smart Contracts (Solidity, Cairo) · MCP + Agentic Workflows · Shipping on Ethereum, Base & Starknet · Learning Rust
vollmond.sterne @vollmond_sterne
73 Followers 318 Following Formal verification lead @Certora | Automated reasoning @tuvienna
safya.eth @Safy__H
3K Followers 5K Following #Blockchain_Developer #Ui_Designer 👩🏻💻 ex Product Manager. PRSpec's Creator
THYSREYNIT @THYSREYNITxz
0 Followers 30 Following
gandu @gandu095
1K Followers 719 Following Prev. offensive security researcher @halbornSecurity | Associate All-Star @immunefi
Kenny @mostlykenny
963 Followers 1K Following Still supported | Cursor Ambassador 🇹🇭 I break contracts and play with AI dev tools
短剧每日更新 @djmffx
196 Followers 658 Following
Shadowslap @TheShadowslap
232 Followers 358 Following “Move not unless you see an advantage; use not your troops unless there is something to be gained; fight not unless the position is critical.” - Sun Tzu
fungible taco @fungibletaco
661 Followers 484 Following saying no for a living | writing @product3_io | Excel missionary | prev. @Consensys | ex-wizard
quikeybalbio1977 @quikeybalb18359
19 Followers 211 Following
محمد عادل @adl_mhmd91187
268 Followers 814 Following
BuFFeRs Academy - Sim... @BuFFeRsAcademy
1 Followers 58 Following
Jessica Gyang @JessicaGya6902
18 Followers 151 Following
call up and find out ... @0xgreazy
517 Followers 3K Following 🇱🇸 || Security Researcher (🦀) || API Security 🛡 || High Intelligence, High Energy ⚡️ @Arsenal❤️ #DifferentHere
D3NRX Official @D3Nrx86379
2K Followers 5K Following Founder | D3X Building more than a token. Building a community. https://t.co/08dIkWc4Ww
Murtaza Ali Imtiaz @murtazaix
43 Followers 535 Following Building the world's fastest AI-governed High Frequency Trading (HFT) Platform | Rig (ARC) · Solana | Zero Python | ECDSA/Ed25519 @polarbearsystms(🍨).
0xKenzman🥷🐺 @kenzman18
1K Followers 748 Following Web3 dev/Builder, contributing to open source, host @ Ecogist. wolf🐺. Building @sfdstacks, @shieldedhq, @ipayx_hq. Dm is open for partnerships. Tea or coffee?
bouguera amira @amirabouguera
1K Followers 1K Following ZK & cryptography researcher|DeFi & smart contracts | Formal verification | Writing about what breaks and why
Phaynuang Bachquach |... @bachquach62260
9 Followers 24 Following
riptide @0xriptide
10K Followers 3K Following CEO & co-founder @therealgregoai | host of @bountyhunt3rz podcast | top ranked whitehat on @immunefi https://t.co/vWgt74lyXu
Born.eth @codyborn
2K Followers 1K Following Trading Execution + Ecosystem Engineering at @Uniswap 🦄 Prev Celo + Microsoft
Paul @Paulctobak
82 Followers 1K Following
keeคนจริ @kumpakee68711
19 Followers 214 Following
pablo 🐪🦊 ⬡ �... @0xpablockchain
5K Followers 5K Following DeFi Product Architect. I build products that resist hype and survive volatility. Systems first. Incentives aligned. Execution over
cholakov @cholakovvv
2K Followers 754 Following Blockchain Security Researcher · contractor at @CODESPECT & @sherlockdefi · prev @threesigmaxyz
aua_oo7 @aua_oo7
61 Followers 682 Following Smart Contract Security Researcher || view profile on 👉 @code4rena @cantinasecurity @immunefi.
13u9 @13u9_kyeong
0 Followers 122 Following
Wojack @Wojack0x0
14 Followers 126 Following Smart Contract Auditor & Security Researcher Solidity | Vyper | Move | Rust @hackenproof & @Code4rena & @Sherlockdefi https://t.co/UEvVdYR1aQ
Eric Marti Haynes @ericmartihaynes
330 Followers 326 Following Tokenization Tech Lead @nethermind Ξthereum
Kalzak @0xKalzak
264 Followers 224 Following Security Researcher, Nerdsnipe Sufferer, Math Beginner, EVM Enjoyer
Aayush Giri @AayushStack
1K Followers 2K Following snr devrel @Nethermind // i build crypto + ai tooling and explain how it works // onchain infra & perps // code hard, shitpost harder
Tomasz K. Stańczak @tkstanczak
29K Followers 2K Following Building a robotics startup at @hf0 Summer 2026. Hiring AI-native engineers. Ex-Co-Executive Director at the Ethereum Foundation | Founder @nethermind
Keyword 💙🛠️ @xKeywordx
762 Followers 658 Following Reviewing smart contracts and making Web3 safer one protocol at a time | SR @NethermindSec
Origin Protocol @OriginProtocol
164K Followers 7K Following Simplifying yield for everyone. Creators of $OETH, $OUSD, $OS, ARM, and Super OETH.
smartprogrammer.eth �... @Smartprogrammer
1K Followers 452 Following Ethereum Core Developer @nethermind Building https://t.co/sfqD9U0xd8 Opinions are my own. believe in somETHing.
ZKsync @zksync
1.5M Followers 109 Following Incorruptible financial infrastructure: a network of chains secured by cryptography, not validators.
Lean @leanprover
11K Followers 49 Following Lean is a dependently-typed programming language and theorem prover.
molecula @molecula_io
308 Followers 151 Following Idle stablecoins mean missed opportunities. Why not keep them liquid while earning real-time yield? Explore DeFi, simplified 🧪 Audited by @HalbornSecurity
Comi Roa @ComiRoa
116 Followers 477 Following Business Development & Strategic Partnerships. Web3 - Security -Enterprise @nethermind. Building Ethereum & Agentic AI projects @NethermindSec
Flagship.FYI 🟦 @FlagshipFYI
70K Followers 980 Following ✦ The Superapp for AI driven crypto signals ✦ Proprietary agentic signals Any token, any chain Advanced tooling For $FYI holders only
Syndika @Syndika_co
4K Followers 979 Following The brightest minds in Web3 use Syndika’s hub to find expertise, resources, and connections that can create a high impact.
Tzahi Kanza @tzahi_kanza
3K Followers 496 Following Co-Founder at @KimaNetwork & CEO at @Syndika_co #Blockchain #Web3
Rekt News @RektHQ
432K Followers 1K Following Rekt News is a global investigative intelligence firm focused on cybersecurity, AI, digital assets, and critical infrastructure.
Wilder World @WilderWorld
247K Followers 963 Following An Open World Simulation | Free to play on Epic Games | Download Now
zERC20 @zERC20io
34K Followers 115 Following Make your everyday tokens private. As simple as connecting a wallet: wrap → send → redeem, unlinked. USDC, ETH, BNB — more soon.
Skate @skate_chain
621K Followers 470 Following Connecting all VMs. Interact with applications from any VM while staying on your favorite chain. Backed by @HashKey_Capital @SeliniCapital @NomadCapital_io
UndercoverIRIS @UndercoverIRIS
4K Followers 13 Following AI-powered Web3 security agent powered by @Nethermind tech, owned by @virtuals_io
Ethereum Foundation @ethereumfndn
73K Followers 0 Following The EF is a non-profit that supports Ethereum. We work alongside the wider ecosystem to improve the protocol, grow our community, and advocate for Ethereum.
OnePiece Labs @OnePieceLabs
26K Followers 449 Following Web3 Accelerator | Mentorship, Networks & Resources. Unleash your potential. Achieve your dreams with us.
EDCON @EDCON_Official
8K Followers 926 Following A global non-profit conference committed to serving the #Ethereum ecosystem & enhancing Ethereum community interaction worldwide. 📍EDCON 2025 - Osaka 🇯🇵
Julian Sutherland @ Z... @JulekSU
609 Followers 650 Following PhD @imperialcollege. Head of formal verification @nethermind
TokenTable @TokenTable
49K Followers 1 Following TokenTable is the #1 token distribution platform built by @Sign.
Denisa Diaconescu @_ddiaconescu_
209 Followers 391 Following Educator & Researcher | Assoc. Prof. @ Unibuc
Petar Maksimović @PetarMax
235 Followers 322 Following Formal Verification Engineer and BD Lead (@NethermindSec). Program analysis, photography, singing, tennis, mental health. All views are my own.
Fede 🤌🏻 @Fedxyz
397 Followers 647 Following Spreading Italian gestures around the World 🌎 🇮🇹🍕🍝 Growth @kpk_io prev. @nethermindEth
0xbrivan 🇵🇸 @bri_samed
967 Followers 583 Following Blockchain Security Researcher @Nethermind | Lead-judge @codehawks | Auditor at @PashovAuditGrp | Working on 5G x Blockchain
Lesa Moné @lesa_hi
3 Followers 12 Following
Lagoon @lagoon_finance
2K Followers 28 Following Build yield products that scale, and bring the best of DeFi to your users.
MempoolSurfer(.eth|.s... @mempoolsurfer
1K Followers 722 Following Co Founder @ https://t.co/kNfHMrE5Ee, Formerly Co-CTO at @nethermind @nethermindstark.
Igor Zhirkov @rub_duck_type
273 Followers 366 Following Programmer, researcher, writer. Author of 'Low-Level Programming: C, assembly and program execution' Ex-compiler team, @the_matter_labs
ANDAO (💙,🧡) �... @ArbitrumNewsDAO
73K Followers 3K Following A fun #DAO focused on @arbitrum and purely run by donations! We help all $ARB new startups to build their communities! ✉️ DM help! (💙,🧡)
OpenSense ₿ @opensensepw
4K Followers 2K Following Open Web3 Security. backed by @ethereum, @starknet, @zokyo_io and @guvenkaya_sec https://t.co/GMTeSbTHmo https://t.co/ip5O09Qxja
Cyfrin Solodit 🟪 @SoloditOfficial
12K Followers 28 Following The world's largest blockchain vulnerabilities database. Explore reports, findings, and bugs from top web3 security firms. Powered by @cyfrin
Cyfrin Audits @cyfrin
16K Followers 40 Following Securing the blockchain and its users. Powering @cyfrinupdraft | @soloditofficial | @codehawks | @battlechain
Olympix @OlympixSecurity
1K Followers 288 Following Pre-deployment security infrastructure for on-chain systems with real economic risk. $155B in assets secured & counting. Proactive. Automated. Verifiable.
FailSafe @getfailsafe
35K Followers 260 Following Agentic Continuous Offensive Security Platform. SWARM breaks your AI agents, APIs, and apps before attackers do, continuously.
Ekubo @EkuboProtocol
22K Followers 31 Following Open source permissionless AMM infrastructure Swap, provide liquidity, and view protocol stats at https://t.co/6PmV6RQLPU
Nethermind @Nethermind
32K Followers 961 Following Leading blockchain infrastructure and research company building secure systems for Ethereum, AI, and verifiable digital identityTrends for United States
You might like
