Having worked with these guys over the past 3 years, they have my full trust and endorsement.
CODESPECT is more than a smart contract audit firm.
We are an offensive cybersecurity company operating across Web3 and Web2. We combine smart contract expertise with application security and adversarial testing to review the full attack surface: contracts, websites, APIs, bots, backend systems, and off-chain logic.
Our work is neither AI-only nor manual-only. It is a rigorous combination of advanced tooling, AI-assisted analysis, and experienced human security researchers.
We are not positioned as the cheapest provider, nor are we priced for appearances. Our pricing reflects the depth of work, responsibility, and skilled team required to protect serious protocols.
We have maintained this standard even in a difficult market because security cannot be reduced to a checkbox. It is a shared responsibility between protocol teams and auditors.
Our team holds certifications including CRTP, OSCP, CEH, and eCPPTv2, with experience across private institutional engagements and competitive reviews such as SpecSiege.
In DeFi, our expertise spans vaults, options, RWAs, leverage, order books, lending and borrowing, and more.
Clients come to CODESPECT for a review. They return for a long-term security partnership.
Code. Inspect. Protect.
1
5
269
bitcoin:native
So far price is playing out as expected,
Didn't sweep the dL, so it's possible we might clear it after testing the TWO and wVWAP.
Overall nothing much to update, the plan is still the same - Pump into the zone above and then reject from there.
bitcoin:native
Here's what I am looking over the weekend,
After sweeping the range highs at 81.3k, price dumped to 76.9k.
Now we are chopping into the weekend and what I am expecting next is,
The sweep of dL (77.3k) followed up by a pump to the high probable lower high levels/zone, which are:
TWO (78976)
wVWAP (79085)
We also got a 15 mins OB above, which could give a decent rejection.
Overall, this is what my weekend plan looks like based on the thesis I gave in the previous post.
7
8
74
112,077
Jack Xu retweeted
12 years ago today, the first Bitcoin recipient Hal Finney passed away.
317
616
8,633
612,377
Jack Xu retweeted
If a founder was never good at video games, that's a red flag.
465
194
2,745
430,042
Following consensus from Sign Foundation and the majority of our backers, we are updating the $SIGN token unlock schedule.
The first three unlocks remain unchanged: 1/24 monthly through July 2026.
After that, unlocks will move into spaced tranches:
• Jan 15, 2027: 1/4
• Jul 15, 2027: 1/4
• Jan 15, 2028: 1/4
• Apr 15, 2028: final 1/8
The revised schedule is being synced to CoinMarketCap
coinmarketcap.com/currencies…
All investor and early contributor tokens remain fully unlocked by April 15, 2028. This is a timing restructure, not an extension. There is no preferential acceleration.
The purpose is to reduce continuous monthly overhang and turn unlocks into managed liquidity events aligned with stronger business and market windows.
We are also launching Forward Claim, a dedicated venue for locked tokens, allowing eligible holders to rebalance through an OTC-style forward market without impacting spot liquidity.
More details will follow.
25
30
100
32,638
Our LZ receiving libraries have been pinned. Thanks for the heads up @EbisuEthan. Also, the same pinning should be done for every network that the OFT supports, not just Ethereum.
Lost aura, gained security, A-OK.
Updated our tooling to detect pinning. github.com/Built-by-Sign/lay…
layerzero solosig dependency check in
if you haven't hardened your config, you are sitting on an unnecessary dependency on layerzero 3/5 solosig.
if it gets compromised, it could instantly drain all the adapters that rely on the default receive library. after the kelp exploit, the vulnerable adapters tallied to $3.13 billion. after some outreach, the number has dropped to $178 million.
good progress, but still not enough. there is still a long tail of projects that have ignored this advice.
i will make this simple for you. here is a full list with exact calls for how to pin the default library.
gist.github.com/banteg/cbf75…
5
4
11
1,624
Jack Xu retweeted
#Bitcoin days are numbered. It seems like just a matter of time before it suffers the same fate as online gambling.
1,996
2,733
12,642
Today, we are open-sourcing a toolkit ported in Go that parses and writes SWIFT MT messages as a part of our ongoing CBDC work.
Aside from being used for international wire transfers, the MT format is also core to certain RTGS systems in central banks.
github.com/Built-by-Sign/swi…
4
10
21
1,513
In light of recent events, we are open-sourcing a local web tool that helps projects easily manage their LayerZero OFT wiring configurations, when the OFT delegate is a Safe multisig.
Configurations can be imported or exported as JSONs for convenience.
github.com/Built-by-Sign/lay…
4
12
33
2,067
This weekend KelpDao lost $292M. @LayerZero_Core just published their incident report.
The protocol worked as designed. The smart contracts were fine. The money left through an RPC poisoning attack on a single-DVN configuration that multiple parties had warned against.
A thread on what this teaches us about every attack surface. 🧵
1
6
11
973
Jack Xu retweeted
Now live: $SIGN
@Sign empowers nations to adopt blockchain and unlock crypto for all.
Start trading today → app.kraken.com/JDNW/SIGN
23
23
106
28,872
It's open-sourcing time.
This week, we are dropping a web tool that helps projects deploy tokens to Hyperliquid spot (progress detection, error handling, etc.), as HL's existing UI omits advanced configuration options only accessible through their API.
github.com/Built-by-Sign/hyp…
5
8
32
9,681