Neodyme

@Neodyme

We secure software with deep-dive audits, cutting-edge research, and in-depth trainings. Secure your solana program with Riverguard @ riverguard.io 🏞️💂

Germany

neodyme.io

Joined August 2021

46 Following

5,614 Followers

Replies Reposts Media

Pinned
Neodyme
@Neodyme
Nov 1, 2023
Introducing Riverguard 🏞️💂 A new security tool for Solana program deployers... 🧵 riverguard.io
Solana Events and Solana
22
Neodyme
@Neodyme
Apr 17
Happy to publicly announce the new advisory!🎉
TheZDIBugs
@TheZDIBugs
Apr 15
[ZDI-26-280|CVE-2026-4682] (Pwn2Own) HP DeskJet 2855e JobStatusEvent Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8; Credit: Team Neodyme (@Neodyme)) zerodayinitiative.com/advisories/ZDI…
1
Neodyme
@Neodyme
Apr 1
Small update on the unfolding Drift timeline: as surfaced in other threads (eg x.com/TheSoftwareJed…), the malicious proposal and execution were nonce transactions (those can be signed offline and not immediately submitted to the network). The thing about nonce accounts is,
Dana
@TheSoftwareJedi
Apr 1
i missed the fact that these drift related squads txs had durable nonces... that changes things. perhaps all my wallet security rants are misapplied here. the drift admins may not have completely exposed their keys. just signed a rogue tx sometime in the last 10 days / 2 days
2
Neodyme
@Neodyme
Apr 1
Drift Protocol on Solana just got drained. It's looking like a multisig member compromise -- and the story starts at least a 20 days before the attack. Here's the breakdown:
3
Neodyme
@Neodyme
Mar 24
Excellent discussion on the current and future landscape of Solana auditing. Thank you @mikemaccana!
Solana at Quicknode
@QuicknodeSolana
Mar 24
We spoke with Marius at @Neodyme - auditors for Anza, Jump, Marinade, Drift and more - on the past and future of Solana program security.
00:00
2