co-founder and ceo @verialabs (yc f25) | hack things @smiley_ctf

Pinned Tweet
We spun out of the #1 hacking team in the US and built AI that finds what even the best hackers miss. During one engagement, it found 6 different ways to take over any user's account on a popular webapp. Completely autonomously. Then suggested fixes for every single one. Today we're announcing @verialabs' $3.2M seed, backed by @ycombinator, @gokulr, @paulg, and @woloski (co-founder of Auth0), and many other great investors. DM me if you want to know what we'd find in your app.
25
19
247
57,340
stuxf retweeted
Our first team won DiceCTF Finals, with our second team placing 7th place. Thanks to @dicegangctf and @QuendCon for hosting such an amazing ctf! Next time we'll spell out smi - ley properly on the leaderboard.
2
8
38
1,238
Proud to sign this as @verialabs and to support @OpenAI's call for collective action on cyber defense security is one of the most important + challenging problems right now. many scary things but together we can make the future much safer.
1
5
26
1,329
new banger CTF merch drop courtesy of @unvariantwinter and voxal (alas shipped too late for defcon)
2
32
2,120
Luna is so cheap now, so excited to use this model anywhere and everywhere 🥹 … beginning to feel like intelligence too cheap to meter
We are committed to pushing the model frontier across cost efficiency, capability, and speed. Starting today, we are reducing prices for GPT-5.6 Luna by 80% and GPT-5.6 Terra by 20% , and offering a faster option for GPT-5.6 Sol in the API. Luna and Terra’s lower prices are reflected in how usage is counted in Codex and ChatGPT Work, so your usage goes further.
1
362
🧵Veria AI autonomously found and demonstrated a critical vulnerability in Aleo, finding a proof forgery in Aleo's snarkVM. The project awarded us the maximum bounty of $65,000 for the find.
5
5
49
11,482
stuxf retweeted
Another 5-figure win for an Immunefi SR. Congrats to @verialabs and @Cayden_Liao.
6
11
203
9,142
how is this happening again
Multiple security vulnerabilities affecting React Server Components and Next.js have been disclosed. We strongly recommend updating your applications immediately. Cloudflare WAF managed rules already mitigate the disclosed denial-of-service vulnerabilities, and we are investigating additional coverage for several other CVEs. developers.cloudflare.com/ch…
4
449
stuxf retweeted
🏆#EPFL #LakeCTF 2026 — it's a wrap! 🚀 Another year, another amazing battle of brains of creativity!🧠💻 Congratulations to this year's winning team pls carry :3! And thank you to every participant for making this edition such a success.👏 🥇 pls carry :3 🥈 .;.;. 🥉 FluxFingers
10
47
3,552
Part 2 of @verialabs Securing Open Source series: We found 2 bugs that could be chained together in Kraken Wallet: Chaining both, a malicious dApp could impersonate a trusted one and disguise transactions as messages, silently draining user funds. Blog: verialabs.com/blog/securing-…
1
6
726
We wrote up everything we do to secure our open source projects at Astral
10
39
357
23,377
stuxf retweeted
recently onboarded to @verialabs (F25) to help with our security Highly recommend working with them! Super professional, clean UI, and well worth the investment The product lives within our CI/CD, and it's a super easy github integration 🥂
3
3
20
2,076
stuxf retweeted
Starting a series where we write up interesting vulns our agent at @verialabs finds: First up, 1-click RCE in Goose, Block's coding agent with 33k+ stars: verialabs.com/blog/securing-… Goose was vulnerable to CSWSH, allowing an attacker-controlled website to run arbitrary commands.
5
7
25
2,415
We at @verialabs built an autonomous CTF agent in a weekend and won 1st place at @BSidesSF 2026, solving all 52/52 challenges. It races multiple AI models (Claude, GPT-5.4) in parallel, each in isolated Docker sandboxes with full CTF tooling. A coordinator LLM reads solver traces and sends targeted guidance to stuck agents. As AI gets better at finding and exploiting vulnerabilities, we think it's important to understand exactly how good it is and where it fails. github.com/verialabs/ctf-age…
11
53
319
35,645
stuxf retweeted
We just qualified 2 teams for DiceCTF Finals, with one of our teams getting 2nd place overall! Congrats @BunkyoWesterns on winning and we'll see everyone in NYC! insert line about llms ruining ctfs here
3
7
32
5,804
Went to @ycombinator startup school last year, ended up having dinner w/ visiting partner @aroraharshita33 decided to apply for the fall batch and got in after :) if you're at all interested in startups, highly recommend applying, free sf trip and a life changing two days
Startup School is back! Hear from Jensen Huang, @sama, @alexandr_wang, @JeffDean, and more. Join a hand-selected group of top CS students, researchers, and engineers for two days of talks, sessions with YC partners, and hands-on robotics demos, right here in San Francisco.
5
8
43
15,472
We spun out of the #1 hacking team in the US and built AI that finds what even the best hackers miss. During one engagement, it found 6 different ways to take over any user's account on a popular webapp. Completely autonomously. Then suggested fixes for every single one. Today we're announcing @verialabs' $3.2M seed, backed by @ycombinator, @gokulr, @paulg, and @woloski (co-founder of Auth0), and many other great investors. DM me if you want to know what we'd find in your app.
25
19
247
57,340