hexens (@hexens) / X

hexens

1,952 posts

hexens

@hexens

Security for those who cannot afford a mistake.

hexens.io

Joined September 2021

Following

9,163

Followers

Affiliates Replies Articles Media

Pinned
hexens
@hexens
Jul 6
1/ we found a bug in the Aptos Move VM that put up to $70B at systemic risk. type confusion at the execution layer. a ~90% success rate across hundreds of simulated runs on a 30+ validator cluster. cost to build the attack infrastructure: $3,000. Conducted by @kemmio , to our
Arbitrary Struct Hijack in Aptos Move VM
From hexens.io
hexens
@hexens
6h
Audit Completed: @roycoprotocol We're glad to have supported Royco with a security review of a major refactor of Royco Day, their risk and liquidity transformation protocol. The update splits each market into three tranches, adding SLP (Senior Liquidity Provider) alongside
00:00
hexens
@hexens
Aug 7
An invariant that is never evaluated against a transaction is just a small projection of truth. Take one Morpho Blue market on mainnet, wstETH collateral against USDC loans. It is currently 3,381,164 USDC away from breaking its own stated invariant: borrowed assets can never
hexens
@hexens
Aug 4
Audit Completed: @thesauros_one We're glad to have supported Thesauros with a security review of their optimized Rebalancer contracts. It's an ERC4626 vault that reallocates deposits across lending providers to keep yield up. Our audit covered the withdrawal and allocation
00:00
hexens
@hexens
Jul 31
Teams evaluating Glider Monitor asked us questions worth sharing. Auto pause, off chain invariants, PagerDuty severity, who holds the pausing keys and more. Full answers in the cards.
00:58
hexens
@hexens
Jul 16
Standard monitoring isn't enough anymore. So we built on top of it. Today we're launching Glider Monitor, built for everyone in Web3 deploying Contracts or Capital. At its core is Glider - which recognizes any on-chain pattern and tracks it across your contracts continuously,