Cofounder of @Zircuit, also serving humbly @quantstamp ; Hosting @ethtaipei; Lecturer @nycu_official. I'm a professional APE - Asia Pacific Engineer.

Waterloo, Ontario
On boarding new devs via course requirements at @EthTaipei and @ETHGlobal hahahahha
Impressed with the Taiwanese student devs that came through. Thanks to @martinetlee for making it happen!
3
4
71
7,905
MartinΞt LΞΞ retweeted
Onchain security is everyone’s problem and nobody’s job. ETHSecurity Initiatives is how we are changing that. Propose the work. Fund the work. Build the work. initiatives.thedao.fund/
40
109
392
195,721
Seems like @makinafi is not in fault. but this is a configuration error. A wallet automation system had a guest list and a menu. Someone put a "forward anything from anyone" doorman on the guest list, and one menu item said "invest our money, you pick where". Detail below
1
2
6
413
LOCK 1 FAILURE Slot 7 on the approved list was 0x4f0055926c839d1d960a82cbf84e2ee933958ebc That contract is a bare relay. It forwards whatever you hand it and never checks who you are. The real approved list was 6 addresses plus everybody.
2
118
Update for completeness: The relay DOES check you. Two checks: - is this a target I recognise - are you on that target's executor list Both are skipped when you address the call to the dispatcher itself. So you don't get on the list. You make the dispatcher be the one asking.
1
24
LOCK 2 FAILURE The allowlist registered the SHAPE of an action, not its CONTENTS. The abused entry are 7 state slots, all caller supplied. Including which Uniswap V4 pool. So the permitted order was effectively: "add liquidity on Uniswap V4, you pick the pool"
1
79
THE ATTACK 1. Mint a worthless token 2. Create UniV4 pools pairing it against the Safes' assets 3. Call the open relay 4. Submit the allowlisted LP action pointed at your own pool 5. deposits real money into a pool full of fake token 6. Swap token in, take the real assets out
2
1
77
MartinΞt LΞΞ retweeted
Security in virtual assets goes beyond smart contract code. As blockchain systems grow more complex, understanding how they fail has become an increasingly important part of building them. At ETHTaipei’s Institution Day, Martinet Lee @martinetlee, Head of Developer Relations at @Quantstamp, will present “Security Issues in Virtual Assets and Smart Contracts.” Martinet brings years of experience in blockchain security, spanning security research, smart contract audits, and developer education. At Quantstamp, his work has included DeFi security, analysis of exploits, and public talks on pitfalls in ERC-4337 implementations. From security research to helping developers better understand blockchain risks, Martinet brings a practical security perspective to this year’s Institution Day. Sep 14 · Institution Day Explore ETHTaipei 2026: ethtaipei.org/ Join us in Taipei: luma.com/8z5ys4rl
1
1
15
351
MartinΞt LΞΞ retweeted
ETHTaipei returns Sep 13–15. Same place. New cycle. More builders, researchers, founders, and Ethereum conversations coming to Taipei. Probably nothing.
1
8
47
2,812
MartinΞt LΞΞ retweeted
We're excited to be contributing $50,000 to the Ethereum Security QF matching pool! Researchers, auditors, and protocol-level contributors are what keep Ethereum resilient for the future. Every donation backing them now goes further.
We’re happy to share that @Quantstamp is contributing $50,000 to the Ethereum Security QF matching pool 🛡️ A global leader in blockchain security, Quantstamp has conducted 1,300+ audits and secured $500B+ in digital assets since 2017, working across smart contracts, L1s, and web infrastructure. This contribution strengthens the round at its core, increasing the matching pool and helping every community donation go further. The round launched with 500 ETH from @thedaofund to fund Ethereum security. With Quantstamp’s support, the impact of that funding grows even further. Explore the round and support projects 👇 qf.giveth.io/qf/ethereum-sec… Help grow the matching pool 👇 giveth.io/project/ethereum-s…
9
14
56
6,282
shower thought (when being showered by rain walking outside): When implementation becomes cheap, taste and vision are more important than ever - which are both rooted from actual understanding. Need to work hard and polish on this side.
3
5
231
Can anyone shill me some projects to donate to on Giveth for the Ethereum Security round? already have some in mind qf.giveth.io/qf/ethereum-sec…
1
1
246
A KB system that I use a lot myself. a markdown KB that researches itself. Claude plans the agenda, fetches sources, writes atomic notes with citations and epistemic status, then audits for contradictions, gaps, and stale claims. Plain files on disk. Obsidian-compatible. Queryable from any LLM via MCP. Can also publish notes as html to share with people. github.com/martinetlee/Synap…
1
206
Grateful that I got the Badge. Continue to work and continue on contributing to the security ecosystem!
The final 100 ETHSecurity Badge holders are in! That brings us to 200 security experts, guiding how TheDAO allocates its funds and also coordinating behind the scenes to make Ethereum safer. Big thanks to everyone who engaged with the process and helped shape it, and to @bonfiresai for building the tooling that made it possible.
1
4
164
We are back!! I promise we won't recite EF mandate lol. Just technical talks and discussions.
Mark your calendars 👀🔥 ETH Taipei is back in 2026, Sep 11–15 (tentative) 🇹🇼 4 days of builders, ideas, and the energy you only get when the right people come together. See you soon 🫡
1
10
257
MartinΞt LΞΞ retweeted
Turtle is integrating @Zircuit vaults. LPs can deposit USDC or USDT on Ethereum or @base targeting ~8-11% APR. No deposit minimums. 0% management fee.
12
11
56
8,387
LOL…
Following the ongoing situation in Iran, I am convening a special Security College on Monday. For regional security and stability, it is of the utmost importance that there is no further escalation through Iran’s unjustified attacks on partners in the region.
1
1
249
This week earlier @Zircuit Finance is live, and now also ready for integration: with referral, integrator will earn 10% of the protocol profit - real yields, streaming venue, and no cap! Read the doc for more information, and feel free to reach out! docs.zircuit.com/zircuit-fin…
6
171
MartinΞt LΞΞ retweeted
Zircuit Finance is now live. Institutional-grade yield. Transparent structure. Security-first design. Targeting 8–11% APR with no deposit minimums and 0% management fee.
90
367
697
293,223