Joined November 2019
- Tweets 5,240
- Following 2,168
- Followers 2,760
- Likes 32,170
370 Photos and videos
Pinned Tweet
Q1 was great π
- on audits: found (4 soundness, 11 completeness, 20 cryptographic bugs, 10 logic bugs) across zkVMs, Bitcoin zkrollups, FHE protocols, noir, solana, STARK ecosystems and one DeFi project.
Glad to help secure them.
5
3
49
3,403
thisvishalsingh πͺ Security Researcher retweeted
Super proud to have contributed to the security of Plonky3 v0.6.0!
Massive respect to @tcoratger, @RobinSalen, and everyone involved. π«‘
Jun 11
π₯ WHIR has landed in Plonky3 π₯
We just released v0.6.0, and with it we open the door to the world of multilinear PCS! π
We've also shipped a ton of cool new features and performance improvements.
π Spoiler alert: Circle STARK is now *really* fast.
github.com/Plonky3/Plonky3
2
19
948
If you need a security review at Mythos level capabilities just DM me.
Jun 13
The US government, citing national security authorities, has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees.
The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance.
Access to all other Claude models is not affected.
We apologize for this disruption to our customers. We believe this is a misunderstanding and are working to restore access as soon as possible.
Read our full statement: anthropic.com/news/fable-mytβ¦
6
705
Looks like the Security Researchers are in good time to pursue Plumbing, as Devs/BDs is now doing security research and audit.
Jun 11
If you want to trick Fable into doing a security audit, try this.
Looks like our AI overlord has a bit of empathy.
3
396
whatever happened to zkVMs like SP1
are they still around?
7
783
Manual security process is still my 1st priority.
Using notepad, miro, always makes me feel confident.
2
19
606
Great work.
We at Protocol Snarkification - me and @alexanderlhicks, plus about 30 or so external collaborators - are working hard with formal verification to ship the highest-assurance zkVMs possible. (see end of thread for collaborators) (1/n)
8
583
If your privacy protocol is not audited by me, there is a high probability of getting rekt.
2
243
Blockchain privacy has bigger problem - security
2
389
πΏ
fuck FUD
243
Which Security firm is running parallel audits?
Or
Are they gone? π
3
354
What's cooking @sherlockdefi ?
May 28
Applications are now open for the Sherlock x @0xPolygon Heimdall v2 security engagement.
Individual security researchers and teams building AI auditors / agents are welcome to apply.
Accepted applicants will receive next steps by email - Kicks off June 15.
Apply here π docs.google.com/forms/d/e/1Fβ¦
1
578
Idk why you as Privacy protocol using TEEs.
2
1
266
thisvishalsingh πͺ Security Researcher retweeted
Study from past reports if you like Fastrack method to smell how bugs looks like.
github.com/ZippelLabs/zkVMs-β¦
3
15
573
zkVM audits are not smart contract audits with extra math. The risky parts sit between VM semantics, constraints, host inputs, proof generation, and verifier bindings. If the system proves the wrong statement, validity does not save you.
DMs open for focused reviews.
1
1
17
952
If you don't believe in AI, you should start with gemini 3.5 then go to gpt/Codex 5.5.
3
574
thisvishalsingh πͺ Security Researcher retweeted
8/ Auditor checklist for hash boundaries:
β’ wrong hash used onchain vs in-circuit
β’ missing domain separation
β’ inconsistent serialization
β’ endian mismatch
β’ field truncation
β’ ambiguous packed encoding
β’ Poseidon parameter mismatch
β’ Merkle path checked against the wrong tree
Hash glue code is bug territory.
1
2
10
518
Another big hack saved, great work @m4rio_eth.
I wonder, when a hack happens everyone's run to get pr but when a Whitehat saves funds, no one is there to appreciate it.
May 20
$50,000 bounty payout to @m4rio_eth! π₯
Some time ago, he joined our podcast to share his journey βFrom Web2 to Web3β - and now, this $50,000 payout marks another strong milestone in that path.
Huge congratulations from the HackenProof team!
2
34
1,383