Paul Kuryłowicz
@wh01s7
Followers
1K
Following
3K
Media
279
Statuses
2K
I don’t need the code to find bugs in your smart contracts. Threat modeling promotor🛡️ @Composable_Sec Co-Founder
Joined December 2019
Looking forward to your feedback!.@PatrickAlphaC @Mudit__Gupta @pashovkrum @adrianhetman @ckksec @YSmaragdakis @0xRajeev.
We are proud to announce the release of the updated 𝗦𝗺𝗮𝗿𝘁 𝗖𝗼𝗻𝘁𝗿𝗮𝗰𝘁 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗩𝗲𝗿𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗦𝘁𝗮𝗻𝗱𝗮𝗿𝗱 (𝗦𝗖𝗦𝗩𝗦)!. ✅ The best and most comprehensive checklist available for Solidity based smart contract projects.
2
1
21
Yield-bearing stablecoin security depends on how yield is made. Off-chain yields (e.g., T-bills, deposits, MMFs) rely on custodians/regulators, adding custody, legal & transparency risks - embedding coins in TradFi and reducing decentralization.
Yield bearing stablecoins are tokens designed to hold a peg while earning interest for holders. Sounds good, right?. However, where there’s yield, there’s also risk 💣. 🔗
1
1
4
RT @Composable_Sec: Yield bearing stablecoins are tokens designed to hold a peg while earning interest for holders. Sounds good, right?. H….
0
3
0
This single change makes the GPT-5 results much better. Instead of writing down what you want to achieve, start with "Create a prompt that precisely performs the following task: [YOUR TASK] using tips from this article and then just use that prompt.
cookbook.openai.com
GPT-5, our newest flagship model, represents a substantial leap forward in agentic task performance, coding, raw intelligence, and steera...
0
0
1
Combination of off-chain & on-chain yields is very promising. What not many realize is that the same as with (re)staking combining yields usually means adding risks. It’s all good if you are aware of them, but are you?.
Yield bearing stablecoins are tokens designed to hold a peg while earning interest for holders. Sounds good, right?. However, where there’s yield, there’s also risk 💣. 🔗
0
0
3
The team put a lot of work into the improvements, great job!.
We have successfully completed our initial audit with @Composable_Sec with all identified issues resolved. We are so grateful for their expertise in ensuring our smart contracts are secure, and we look forward to working with them again soon!. Find their report linked below 👇
1
0
3
This gives far better results. Separate planning and execution. A single blended chat/session overloads you and the model - and a loosely constrained agent can quietly rewrite your assumptions. Adopt a two-track workflow:.• Track 1 — Plan: write the functional and.
0
0
2
Great work by the @Neverland_Money team!. Huge improvements for users security and overall quality!.
@Neverland_Money partnered with us for a comprehensive security review of their smart contracts. Through our collaboration, 23 issues, including 1 critical and 3 high vulnerabilities, were successfully identified and resolved.
0
0
4
Seeing lots of teams jump to automating audits. For a small team or solo auditors, the real win is.- automating your biggest pain points - the tedious tasks that actually drain your time and energy. - brainstorming together. What slows you down?.
0
1
1
RT @drdr_zz: In the face of numerous domain hijacking attacks, SEAL (@_SEAL_Org) has prepared preliminary recommendations and is working on….
0
1
0
RT @SuperteamPOL: 🚢 All aboard for Ship or Sink! ⚓. In collaboration with @bonk_inu, @Backpack, @xtrade_gg & @XForgeOfficial. This isn't yo….
0
70
0
Most founders see security as a cost to be minimized. They're wrong. The real cost is churn when you treat trust as an afterthought. Proactive security, built-in and transparent, isn't an expense-it's a moat. It's what keeps customers from leaving and lowers your acquisition.
0
0
1
LLMs are quietly killing the browser tab. Why search through noise when you can just ask - and get pre-filtered answers that already fit your intent?. How this will affect SRs write-ups? 🤔.
2
0
4
It's great to see so many security AI agents MVPs. I think this will significantly enhance SRs work and completely transform how standards and compliance procedures look like.
0
0
0
Short, but full of great tips article. Do you leverage all of them in your project? 😉.
What @LidoFinance @redstone_defi @YieldNestFi and @usebraintrust have in common?. They’ve developed effective methods for improving security without drastically increasing costs. Our latest article breaks it down 💬⬇️
0
0
2
RT @_SEAL_Org: This is alpha. 🎯. We just dropped a piece of our playbook building the future of Web3 threat intel with #OpenCTI: . • Real-t….
filigran.io
Learn how SEAL uses OpenCTI for Web3 security to share threat intel, detect phishing campaigns, and protect the crypto ecosystem.
0
17
0
Don't ask an LLM for summarization. Summarization is compression, so you lose data. Ask for transformation. Transformation is organization, so you reduce the noise. Or simply use my favorite.💚Rewrite this text, but no bullshit.
0
0
3