hexens (@hexens) / X

hexens

1,947 posts

hexens

@hexens

Security for those who cannot afford a mistake.

hexens.io

Joined September 2021

Following

9,161

Followers

Affiliates Replies Articles Media

Pinned
hexens
@hexens
Jul 6
1/ we found a bug in the Aptos Move VM that put up to $70B at systemic risk. type confusion at the execution layer. a ~90% success rate across hundreds of simulated runs on a 30+ validator cluster. cost to build the attack infrastructure: $3,000. Conducted by @kemmio , to our
Arbitrary Struct Hijack in Aptos Move VM
From hexens.io
hexens
@hexens
Aug 4
Audit Completed: @thesauros_one We're glad to have supported Thesauros with a security review of their optimized Rebalancer contracts. It's an ERC4626 vault that reallocates deposits across lending providers to keep yield up. Our audit covered the withdrawal and allocation
00:00
hexens
@hexens
Jul 31
Teams evaluating Glider Monitor asked us questions worth sharing. Auto pause, off chain invariants, PagerDuty severity, who holds the pausing keys and more. Full answers in the cards.
00:58
hexens
@hexens
Jul 16
Standard monitoring isn't enough anymore. So we built on top of it. Today we're launching Glider Monitor, built for everyone in Web3 deploying Contracts or Capital. At its core is Glider - which recognizes any on-chain pattern and tracks it across your contracts continuously,
hexens
@hexens
Jul 29
Audit Completed: @autopools We’re glad to have supported Auto Finance with a security review of the latest updates to their Autopools, the self-rebalancing vaults that automate onchain liquidity management. Our audit covered the new ExitDestinations emergency recovery flow,
00:00
hexens
@hexens
Jul 29
Happy to have @okcontract join the Builder Support Program. Builder Support covers what teams need to ship. They cover the vault and strategy infrastructure that comes after.
OKcontract Labs | Chainwall Protocol
@okcontract
Jul 29
Audits secure the contract. Chainwall secures the interaction. Contracts may be audited and formally verified, yet UI spoofing, weak approval flows, and blind signing remain risks. Chainwall secures the interaction itself by proving what was signed and by whom. We are excited