$300,000 from a single bounty. Also yes, it was Move related. Move helps, but it doesn’t magically make protocols safe. The real bugs still live in assumptions, invariants, and integrations. Proud of what VulSight has been doing too. We’ve cleared over $500k in bounties in the last 2 months. If you’re a founder and you want an audit team that consistently finds criticals, we’re a DM away.

Proud to be supporting @SuperteamBlack teams. Building on Solana means shipping fast, but launch security is where most protocols get caught. Black founders now get complimentary one day senior-led reviews and full audits at discounted pricing. Let's ship safer. 🛡️

Proud to be supporting @SuperteamBlack teams. Building on Solana means shipping fast, but launch security is where most protocols get caught. We're here to make sure Black founders don't. Every team gets access to: — Complimentary senior-led security reviews — Full audits at cohort pricing — Direct line to the researchers who disclosed a critical in Solana L1 itself DM @SuperteamBlack to get started.

better security, more confidence to ship. @VulsightSec is now supporting Superteam Black teams with security reviews, audits, and direct support from their team. another strong resource for founders as they scale. dm us for access

That’s a wrap on @CoinfestAsia 2026 in Bali Had a great couple of days meeting builders, founders, investors, and ecosystem teams from across Web3. Really enjoyed reconnecting with familiar faces, meeting a lot of new ones, and having some great conversations around Web3 security, AI × Web3, and what we are building at @VulsightSec . Great meeting @TobiasTBV, @Brent_Fulfer, @Nibel_eth, @PedroMYellow , and many others along the way. 🤝 Already looking forward to continuing some of these conversations and hopefully seeing many of you again at TOKEN2049! Until next time, Bali #CoinfestAsia #Web3 #Blockchain #Bali #Security

You don't get operated on by a hospital You get operated on by a surgeon Security audits work the same way: a brand signs the report, but specific individuals read your code We just wrapped ours. Here's how we picked 🧵

Engagement complete ✅ Vulsight performed an adversarial-style security audit of @eliospay's smart-account modules on HyperEVM: the ERC-7579 validator and hook enforcing their self-custodial model. Sharp team, deep command of their own stack, and a security-first posture from day one. Great engagement.

Quotes came in at similar levels, price wasn't the differentiator. As an early-stage client at large firm, odds of getting the A-team on your engagement are reduced. You the letterhead and get whoever's free that month. With @VulsightSec, we knew whose eyes would be on the code.

Scope: an adversarial-style review of the two contracts enforcing self-custody at @eliospay The validator gating every owner-key action, and the hook enforcing withdrawal cooldowns. The mechanism behind "programmatically unable to touch your funds." 🔒

And those eyes have receipts, all public: - Top 16 all-time on Cantina by public earnings\ - 1st place in the USDaf competition ($67.5k payout) - A High-severity vuln in Geth, responsibly disclosed (CVE-2026-26314) Proof is in the pudding.

Verdict: diligent work, sharp questions, no fluff. We came away feeling we're in good hands, and in security that's the whole point. This feels like the start of a long-term relationship. We'll be back as we ship! 💫 @eliospay @VulsightSec @zerocipher002 @ItsShad0wWalker

Independent security review: complete. ✅ @VulsightSec ran an adversarial-style audit of the smart-account contracts that enforce Elios self-custody on HyperEVM. Your funds stay yours until you spend them. Not policy, code. And we'll keep having independent experts attack that code.🔒

Another big one for team @VulsightSec🏆. Appreciate the mention from @HackenProof. 4 valid reports, $40,000 earned. The reward is nice. The real value is helping identify vulnerabilities before attackers do. Security is a team effort between researchers, platforms, and projects willing to take it seriously. On to the next one.

Quad kill by @VulsightSec: four valid reports and $40,000 earned! Four more impressive payouts for a researcher who consistently earns big rewards on HackenProof. Congratulations on a great result! 🏆

3 days at @ethconf 2026 NYC. Security lens takeaway: the attack surface just expanded a lot. - agents now hold keys. - agents now move money. - stablecoin credit ratings are onchain. - RWAs at $31.8B. and almost nobody talked about privacy.

Another one for team @VulsightSec . A week after hitting Top 10 on @immunefi , a $40K bounty on @HackenProof . The work compounds.

Another big one for @VulsightSec. $40,000 earned on HackenProof 🔥 Not the first big win - and clearly not the last. Huge congratulations from the HackenProof team!

A lot of security firms will tell you what they're capable of. The ones worth hiring let the work tell you. Ours says: → Top 10 on the @immunefi 2026 Whitehat Leaderboard 🛡️ → 100+ audits across EVM, Move & Rust → $845K+ in bug bounties → A CVE (CVE-2026-26314) in Ethereum's Geth client → Ranked #16 all-time on @cantinaxyz Global Leaderboard → Peaked at Top 3 on Immunefi earlier this year The codebase doesn't lie. Neither does the leaderboard.

🌴 The @VulsightSec team has landed in Miami for @consensus2026! May 5–7 | Miami Beach Convention Center If you're building in Web3, let's talk: 🔐 Smart Contract Audits 🛡️ Protocol/Infra Security Audits 🤝 Security Partnerships DM us to grab coffee or meet up on the beach. ☀️ #consensus2026 #Miami #web3 #Security

Most Web3 teams ship fast and patch later. The ones that last? They build security into the architecture from day one. We're working with builders who think in threat models, not just token models. If you're building onchain and want your code rock solid before mainnet, let's talk. DMs open.