Shred Security🤝@RatehopperAI
Proud to publish our fourth security report with @RatehopperAI — an AI-powered platform for self-repaying loans that borrows against your crypto, deploys capital into yield strategies, and refinances debt through intelligent rate optimization.
This marks our fourth audit with the Ratehopper team. As the protocol grows, security remains how they build, not a box they check once.
Coming back for a fourth review is also a clear sign of Shred’s client retention. Teams stay when the work holds up.
Report is in the first comment below👇
Builders, this one’s for you,
🚨 Shred Security just launched FREE Pre-Audits.
AI + Senior researchers will:
- Surface low-hanging issues early
- Review your architecture, code quality & test coverage
- Highlight strengths, gaps & high-risk areas
- Give you a real scope + effort estimate for a full audit
Fast. High-signal. Zero cost (while capacity lasts).
Stop guessing. Get clarity before you go for a full audit.
Request yours → shredsecurity.io/pre-audit
(Doing a Pre-Audit does not require you to go for a full audit with us)
We added 17 new exploits to HackViz from Aug 26 to Sept 26
Tectonic’s ~$74M TONIC pump to Moonwell, Term Finance, Cosmos EVM, Injective, and more.
Each one: timeline · attack flow · token flow · mitigations · quiz.
Learn how they broke. Before the next one does.
Full list is in the first comment👇
hackviz.shredsecurity.io/
Builders, this one’s for you,
🚨 Shred Security just launched FREE Pre-Audits.
AI + Senior researchers will:
- Surface low-hanging issues early
- Review your architecture, code quality & test coverage
- Highlight strengths, gaps & high-risk areas
- Give you a real scope + effort estimate for a full audit
Fast. High-signal. Zero cost (while capacity lasts).
Stop guessing. Get clarity before you go for a full audit.
Request yours → shredsecurity.io/pre-audit
(Doing a Pre-Audit does not require you to go for a full audit with us)
Together with @kvazar_ai, we analysed the root cause and just updated the full technical breakdown of @COLDCARDwallet incident on HackViz:
hackviz.shredsecurity.io/hac…
If you are using COLDCARD wallet, Prioritize these steps:
• Don’t send funds to another address derived from the same seed
→ The seed is the problem, not the hardware wallet
• Update to the fixed firmware first
→ Do not generate a new wallet until you’re on the patched firmware
• Generate a brand-new seed
→ A firmware update does not repair an existing vulnerable seed
• Transfer your BTC to addresses derived from the new seed
→ Importing the old seed into another wallet doesn’t help, the weakness follows the seed.
• If you originally created your seed with sufficient physical dice entropy (50+ private rolls), you’re not affected by this specific RNG flaw.
If you’re unsure, migrate anyway. Move your funds before spending time investigating whether you’re affected.
If someone in your family or friend group uses a COLDCARD wallet, tag them or send them this post.
🚨 April–May 2026 were tough months for DeFi — nearly $700M drained in just 60 days.
April alone was the worst month ever: 28–30 exploits, $635M+ lost. Kelp DAO ($292M) + Drift ($285M) dominated the chaos.
Today we dropped a massive HackViz update:
We added 27 new hacks from April–May with:
- Overview + Root cause
- Token flow visuals
- Timeline
- Safety measures & lessons
Check them all now → hackviz.shredsec.xyz
Time to study the attacks so we stop repeating them.
Shred Security🤝@RatehopperAI
Proud to announce the security partnership between Shred Security and @RatehopperAI — an innovative AI-powered platform that enables self-repaying loans by autonomously borrowing against your crypto assets, deploying capital into yield strategies, and repaying debt through intelligent rate optimization and refinancing.
This marks our third engagement with the Ratehopper team. As the protocol rapidly grows, security remains their top priority.🫡
Shred Security🤝@yieldarche
Proud to announce the security partnership between Shred Security and @yieldarche protocol — an innovative universal yield engine that automates passive yield generation across DeFi strategies, enabling autopilot earning with instant liquidity and full transparency.
1. Happy to share our latest product: hackviz.shredsec.xyz
HackViz is a powerful new interactive platform to understand major exploits, visual, educational, and built for security teams, auditors, builders. 🧵
8/ HackViz turns complex exploits into clear, interactive learning experiences.
No more dense reports or confusing screen recordings.
Visual. Clickable. Educational.
Try it now → hackviz.shredsec.xyz