1. X
  2. Antonio Viggiano
Log inSign up
Antonio Viggiano
5,089 posts
Image
user avatar
Antonio Viggiano
@aviggiano
security @monad
Joined June 2017
1,437
Following
3,135
Followers
RepliesRepliesArticlesArticlesMediaMedia

New to X?

Sign up now to get your own personalized timeline!

Create account

By signing up, you agree to the Terms of Service and Privacy Policy, including Cookie Use.

TermsยทPrivacyยทCookiesยทAccessibilityยทAds Infoยทยฉ 2026 X Corp.
Don't miss what's happening
People on X are the first to know.
Log inSign up
  • user avatar
    Antonio Viggiano
    @aviggiano
    Jun 24, 2025
    Replying to @asmah2107
    This is a classic problem in production database migrations at scale. When you run ALTER TABLE ADD COLUMN phone_number VARCHAR(20) NOT NULL, the DB engine typically rewrites the entire table to add that column (especially in MySQL, Postgres pre-11, etc.). Thatโ€™s what locks it.
    34K034K
  • user avatar
    Antonio Viggiano
    @aviggiano
    Jul 29, 2023
    ๐Ÿ“ฃ Introducing: Solidity Audit Report Generator, a VSCode extension that helps you write your reports using templates, ChatGPT, and // @ audit comments.
    Image
    marketplace.visualstudio.com
    Solidity Audit Report Generator - Visual Studio Marketplace
    Extension for Visual Studio Code - Solidity Audit Report Generator for Code4rena, Sherlock, Hats, CodeHawks, and user-defined templates
    23K023K
  • user avatar
    Antonio Viggiano
    @aviggiano
    Oct 18, 2022
    Replying to @MarcoWorms
    I like this one
    Image
  • user avatar
    Antonio Viggiano
    @aviggiano
    Oct 29, 2023
    I wish I could participate in @paradigm_ctf but fortunately today is my wedding. Wish me luck!
    9.8K09.8K
  • user avatar
    Antonio Viggiano
    @aviggiano
    Jan 23, 2024
    I'm building a list of Aave/Compound common issues and mitigations for forks. Anything I should add to this list? gist.github.com/aviggiano/4c21โ€ฆ
    Image
    13K013K
  • user avatar
    Antonio Viggiano
    @aviggiano
    Aug 6, 2025
    Article cover image
    Article
    AI Auditing Benchmark: A Primer
    Less than a year ago, LLMs were laughably bad at finding smart contract vulnerabilities. That led some skeptics to believe it would take years before they could replace human auditors. More recently,...
    29K029K
  • user avatar
    Antonio Viggiano
    @aviggiano
    Nov 14, 2023
    Between June 21, 2023, and June 23, 2023, I was invited to perform a "diff" review of the @raft_fi smart contracts. During these 2 days, I analyzed each change from the diff, commit by commit, reviewed the full diff side by side, and examined the codebase as a whole in its
    user avatar
    Trail of Bits
    @trailofbits
    Nov 14, 2023
    Replying to @trailofbits
    7 new high & mediums were found in an audit competition, and successive teams continued to find new bugs every engagement. This points to 1) the exploited issue being subtle, and 2) the need for testing & verification to prove safety. x.com/PatrickAlphaC/โ€ฆ
    Image
    Image
    Image
    34K034K
  • user avatar
    Antonio Viggiano
    @aviggiano
    Mar 18, 2024
    I'm happy to share that I've had the privilege of contributing as a guest writer for @a16zcrypto! In this article, I explain how you can execute function calls symbolically in a loop to maintain state on a target contract.
    Image
    Pro-tip: Implementing stateful invariant testing with Halmos
    From a16zcrypto.com
    11K011K
  • user avatar
    Antonio Viggiano
    @aviggiano
    Sep 13, 2023
    I'm excited to finally share our key takeaways and best practices from 6 weeks of fuzzing @BadgerDAO's @eBTCprotocol
    Image
    GIF
    19K019K
  • user avatar
    Antonio Viggiano
    @aviggiano
    Feb 10, 2025
    LIVE CTF happening NOW with +$5K up for grabs on mainnet! ๐Ÿค‘๐Ÿ”ฅ I just deployed a 1/3 @safe, and guess what? One of the owners is Foundryโ€™s default signer, with a leaked PK ๐Ÿ‘€๐Ÿ‘€ etherscan.io/address/0x30B8โ€ฆ But thereโ€™s a catch... This Safe is protected by a RestrictedActionsGuard
    Visit Etherscan.io
    etherscan.io
    Address: 0x30B8Cf2A...bbd52778b | Etherscan
    Contract: Verified | Balance: $27.04 across 6 Chains | Transactions: 34 | As at Jul-16-2026 06:59:03 AM (UTC)
    17K017K
  • user avatar
    Antonio Viggiano
    @aviggiano
    May 13, 2023
    I'm glad to have found my first high severity vulnerability in an audit competition after a top tier review from Trail of Bits. github.com/tempusfinance/โ€ฆ I used to shy away from contests with previous audits, but I guess if you look hard enough you can always find something!
    16K016K
  • user avatar
    Antonio Viggiano
    @aviggiano
    Oct 23, 2023
    โš ๏ธ Attention security researchers & protocol developers โš ๏ธ While reviewing @OpenZeppelin Contracts v5, I noticed some footguns that might hurt projects developing upgradeable smart contracts without extra attention. ๐Ÿญ. ๐—˜๐—ฅ๐—–๐Ÿณ๐Ÿฎ๐Ÿฌ๐Ÿญ ๐—ก๐—ฎ๐—บ๐—ฒ๐˜€๐—ฝ๐—ฎ๐—ฐ๐—ฒ๐—ฑ ๐—ฆ๐˜๐—ผ๐—ฟ๐—ฎ๐—ด๐—ฒ
    Image
    Image
    12K012K
  • user avatar
    Antonio Viggiano
    @aviggiano
    Jul 16, 2023
    โ›ฐ๏ธ The @summit_defi was truly inspiring! Here's my list of the **TOP 5** presentations that I think every _DeFi protocol_ should watch๐Ÿ’ฐ
    20K020K
  • user avatar
    Antonio Viggiano
    @aviggiano
    Jun 15, 2024
    You don't want to miss my Fuzzing Workshop next Monday with @SizeCredit & @Code4rena! Whether you are participating in the contest or not, you will learn about the latest techniques we used to validate bugs from @SolidifiedHQ and @SpearbitDAO manual reviews, as well as new
    Image
    12K012K
Advertisement
Advertisement