Josselin Feist

If Echidna has ever helped you find a bug, now is your chance to help Echidna: initiatives.thedao.fund/initiative/fun… Only $12k is needed for it to qualify for the DAO vote

After the week we’ve just had, DeFi and blockchain protocols need internal security more than ever This was just a preview. We are going to see a lot more vulnerabilities and incidents in the coming months Time to build your in-house security expertise Josselin Feist @Montyly Dec 5, 2025 Most protocols spend a lot on audits and bug bounties but have zero internal security Launching whohassecurity.com to highlight the ones that do Having an internal security team should be in every protocol's New Year's resolutions for

Tldr: if you want to find bugs in your codebase, use the latest frontier models You don’t need a security-specific model outside of a few cases, like doing offensive work (building exploits), working on something sensitive, or running a business that depends on cheap inference devansh ⚡️ @0xAsm0d3us Oct 15 At HackerOne, we benchmarked 18 frontier LLMs against 62 fairly complex vulnerabilities See which model stands where (link in the thread)

A good reminder that keeping your code closed-source for security purpose is a bad strategy If you distribute a binary, treat it as if attackers have the source code Zhuo Zhang @i2huer Oct 14 1/ As someone who have worked on reverse engineering for 10+ years, I've never seen this much excitement around it. Great work, @morluto and @reatools ! Since RE is having such a moment 🔥, I figured I'd share some updates from sre-bench.lol to help you pick the right