Alexey Posikera @PassKeyRa

web2 and web3 security, reverse engineering github.com/PassKeyRa Joined June 2017

Tweets

12
Followers

195
Following

292
Likes

112

Alexey Posikera @PassKeyRa

2 months ago

Seems that someone is creating a huge number of deposit wallets via the @Polymarket relayer, pumping up the gas price on Polygon many times over from usual 100-200 gwei to 6k. >70k$ paid in the last 3 hours for fees on wallets creation via the wallet factory

1 1 5 266 1

View Details

Decurity @DecurityHQ

3 months ago

Decurity team was cooking for the last few weeks. We were able to discover 0days that could've devastated the whole web3 industry if used by malicious actors. We're working hard to prevent it from happening.

3 5 68 6K 12

View Details

Decurity @DecurityHQ

6 months ago

Most audits miss Web2.5 Smart contract auditors focus onchain. Backend devs trust the blockchain. But the real attack surface is the interaction between them. Case study from our recent audit: double-spend via reverted tx secret leak + ECDSA mismatches. blog.decurity.io/a-web2-5-vulne…

1 10 20 2K 7

View Details

Decurity @DecurityHQ

6 months ago

🧐 Your protocol was audited in 2022? That's exactly why it got hacked in 2025. 2025 was the year hackers went hunting through old, audited code — and rounding errors became million-dollar exploits. Our breakdown of top 10 DeFi incidents of this year: 2025-recap.decurity.io

0 7 40 4K 19

View Details

Decurity @DecurityHQ

7 months ago

Ever audited Solana Anchor constraints with 20+ accounts and cross-checks everywhere? Our own @PassKeyRa built a tool that turns them into visual graphs - red flags for missing checks pop out immediately. blog.decurity.io/auditing-solan…

1 6 18 2K 5

View Details

Alexey Posikera @PassKeyRa

10 months ago

For Sui packages decompilation the Revela decompiler is used - github.com/verichains/rev…. The same decompiler produces the source code when you check it in the suiscan.xyz explorer

0 0 0 154 0

View Details

Alexey Posikera @PassKeyRa

10 months ago

Hi all, I published my new SuiSource MCP - github.com/PassKeyRa/suis… Now it has two tools that are useful for researchers - getting the local decompiled version of a package bytecode and collecting extended info about all packages of a project just by a single found package ID

1 3 5 1K 4

View Details

Alexey Posikera @PassKeyRa

a year ago

@publicqi @DecurityHQ Yes, should work! I will check it out later also

0 0 0 35 0

View Details

Decurity @DecurityHQ

a year ago

Releasing our new IDA Pro plugin for analyzing Solana's eBPF programs developed by @dewardgnome. Check out the blog post: blog.decurity.io/reversing-sola…

15 28 107 9K 52

View Details

Fabio @degrigis

3 years ago

Have you ever dreamed about a CLI debugger and pwntools but for smart contracts hacking? @dreselli and I thought about you and we are planning to release some cool stuff for this community. Stay tuned!

12 11 159 15K 42

View Details

YQ @yq_acc

3 years ago

1/n Introducing SolidityGPT.xyz - a GPT-based chatbot trained on @solidity_lang codebase and several Ethereum associated projects like @EthereumNetw , @optimismFND @arbitrum @0xPolygon @zksync, which helps devs to query technical questions around Solidity, Eth etc.

33 299 786 87K 296

View Details

Decurity @DecurityHQ

3 years ago

We're glad to announce that our grant proposal for enhancing our @semgrep solidity rulepack has been approved by @compoundgrants. The purpose is to develop new static analysis rules and adapt them for the Github pipelines of @compoundfinance. We'll tweet soon about our progress!