Paul Kuryłowicz

@wh01s7

I don’t need the code to find bugs in your smart contracts. Threat modeling promotor🛡️ @Composable_Sec Co-Founder

composable-security.com

Joined December 2019

Replies Articles Media

Pinned
Paul Kuryłowicz
@wh01s7
Feb 16, 2023
Looking forward to your feedback! @PatrickAlphaC @Mudit__Gupta @pashov @adrianhetman @ckksec @YSmaragdakis @0xRajeev
Composable Security ⛓️‍💥
@Composable_Sec
Feb 16, 2023
We are proud to announce the release of the updated 𝗦𝗺𝗮𝗿𝘁 𝗖𝗼𝗻𝘁𝗿𝗮𝗰𝘁 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗩𝗲𝗿𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗦𝘁𝗮𝗻𝗱𝗮𝗿𝗱 (𝗦𝗖𝗦𝗩𝗦)! ✅ The best and most comprehensive checklist available for Solidity based smart contract projects.
Paul Kuryłowicz
@wh01s7
Jul 27
New best practices from @claudeai Claude Opus 4.8 → 5: less “think harder,” more “stay in your lane.” 4.8: “Analyse the architecture deeply and identify attack paths.” 5: “Threat-model the login and session flow. List assets, trust boundaries, abuse cases, attacker
Prompting Claude Opus 5
From platform.claude.com
Paul Kuryłowicz
@wh01s7
Jul 24
A clear trend is emerging in AI agent development. We are moving away from manually prompting individual agents and toward systems where agents prompt, coordinate, and evaluate one another. They exchange context, delegate tasks, review outputs, and decide what should happen
Paul Kuryłowicz
@wh01s7
Jul 22
Just discovered that when you select some text in VS Code and ask Claude Code about it in the terminal, it can actually see the selection and respond in context. I’ve been referencing everything with @ this whole time 😅
Paul Kuryłowicz
@wh01s7
Jul 14
This is the kind of engagement I like most - long brainstorms and challenging each assumption with the team.
Composable Security ⛓️‍💥
@Composable_Sec
Jul 14
@LidoFinance is among the most experienced teams we have the pleasure to work with, and our 10th public Oracle review is out. At this level of protocol maturity, the team already does extensive internal reviews, threat modeling, and automated testing. Low-hanging fruit and