cartlex

@cartlex

building security with @mixbytes

Joined June 2013

144 Following

20 Followers

Replies Reposts Media

cartlex
@cartlex
Oct 31
must read
Pablo Sabbatella @ Devcon 8 🇮🇳
@PabloSabbatella
Oct 30
So you are in Crypto and your OpSec is a disaster, if it even exists. Here you have the most important things you have to do right now, in order to keep your assets (crypto, money), devices (laptop, phone) and accounts (email, apple id, exchanges, wallets) safe. Step by step 👇
cartlex
@cartlex
Oct 15
Most of the risk we see shows up after the audit, in upgrades, integrations and new deployments. This is how we work with teams that ship all the time.
MixBytes
@MixBytes
Oct 15
1/6 A single audit covers one commit. Every upgrade, integration, new network and governance proposal after it changes the risk. If your protocol ships changes all the time, security has to keep up, not show up once a year
cartlex
@cartlex
Oct 9
Thoughtful piece on DeFi risk assessment
Shift DeFi
@Shift_DeFi
Oct 7
S&P launched a framework for assessing DeFi vault risk. Days earlier, liquidity dropped sharply across markets used by our vault, triggering exits. Nothing broke, but the risk changed. So how do you rate something that keeps changing? Read in our latest!
Article
S&P wants to rate DeFi vaults. But how do you rate something that keeps changing?
There is something wonderfully institutional about giving a DeFi vault a grade like AAA(v). On October 4, S&P Global Ratings launched its Vault Risk Assessment, or VRA, a new framework for evaluating
cartlex
@cartlex
May 26
One of the cleanest incident responses I've seen in DeFi. Good luck to the @ResolvLabs team with Vault Street, looking forward to what's next.
Resolv Foundation
@ResolvCore
May 26
Article
This is a path forward
A Note Before You Read This On 22 March 2026, a security incident caused illicitly minted USR tokens to enter the market, forcing Resolv protocol to pause operations and enter recovery mode. Since the
cartlex
@cartlex
May 18
We mapped every active audit subsidy program across major ecosystems - some covering up to 100% of costs. MixBytes is a whitelisted provider across many of them.
MixBytes
@MixBytes
May 18
Article
Web3 Audit Subsidy Programs: How Blockchains Help Projects Cover Security Costs (May 2026)
The Audit Problem Every Web3 Team Knows For most web3 teams, the path to mainnet runs through a security audit. Investors expect it. Users increasingly demand it. And frankly, deploying unaudited code

cartlex

cartlex’s posts