I love fundamentals. after understanding the code: - auditing the entry/exit points side by side - auditing the queue/finalisation flow side by side

The latest 10 days in the security space taught us alot of things

honestly this type of thinking is what ruined security research i havent disclosed a bounty in 10 years because the complete lack of compensation they should be extremely grateful he sent back anything

Horribly accurate🥲

*Opens X* Immunify: "Look at this 1 year old AI junior security research that just bagged $1M bounty with only 2 hour of solidity knowledge" *Closes X*

I'm no more interested in knowing/giving opinions about where the future will go. i'm away locked in learning till this settle. web2/ai red teaming/new tech in web3. whatever. don't comment "but what if you learnt something ai is better at"

Does any of the "autonomous agentic AI bug hunters" have positive ROI? Does anyone want to fully disclose human hours spent developing the thing, triaging their findings? (to say nothing of the triaging costs externalized to others) All money spent in API tokens? Both in trial runs, development runs, in runs that didn't produce any valid bugs, and in the ones that actually found bugs? All the violations of terms of use by owning multiple subscriptions? Everything AI is a massive negative ROI. Remove the silly projections of finding all bugs, of curing all diseases, of speeding up everything a gazillion times. It's just sinking hundreds of billions of dollars on things nobody can confidently say adds any value. BuT tHe MoDeLs wIlL gEt BeTter Yet everyone rushes to adopt due perverse incentives and FOMO. Does anyone actually have a plan for what to do when you run out of VC money? Are you all just waiting for the "singularity" (a silly sci-fi idea with no basis on reality, that can't survive two seconds of serious thought)? Or are you all just hoping to sell your bags before people realize?

1/4 The new SpecSiege website is live. Our audit contest platform is built to connect security researchers with real-world Web3 protocols. Every finding strengthens production systems before attackers get the chance. First contest: ✅ Completed ⏬⏬

I can only see kimi k3 effect here

on Codex 5.6 Ultra, they are basically saying that we are giving the model alot of parameters that its behavior is straight unpredictable and can blow your device. Nice

I want to invent a camera that is 1000 MP f3 inch will only allow its 20MP since its very danagerous to allow retail usage. will raise more funds cause i built insane stuff. will restrict access to enterprise elites that pays more. wdyt?

Another critical for an active contract but in a feature that no one is using, Active value in risk is currently 0. won't risk to get scammed for the above reason, i'm waiting

right, Pay 150K for BB for bugs i'm 100% sure they were found by ai (was so fast to be found) instead of paying 20K to an audit firm

Don't tell ai to try numbers in the formula and see. tell it to build abstract script containing the formulas and let it interact with it. Benefit from deterministic script output with non deterministic LLM actions.

Bonzo Lend on HBAR got affected By supra oracle incident bonzo.finance/blog/bonzo-len…

while walking in the streat, heard a child saying: "we don't have to learn this, ai currently is doing everything" got shocked by how far the sequences can look.😭

what if we formally verify our formal verification? and then if there are any issues with that we can formally verify our formal verification of formal verification. and then if there are any issues with that we can formally verify our formal verification of formal verification o

Not even a “thanks”