@0xbertto

Smart contract analytics, white hat bounty hunter.

onchain
Joined September 2010
Free defi insurance is coming very soon, we are here to make this space safer, not to pump any tokens. Be ready, be early.
2
4
1
10
264
With the fast growing of AI capabilities, we need more defi protections and insurances.
#PeckShieldAlert n August 2026, the crypto industry experienced 50 major hacks (+67% from July's 30 hacks), resulting in total losses of $136.3M - a 49.5% month-over-month decrease from July's $270M. The Tectonic.cro incident, which resulted in ~$74M in losses, was the 4th-largest crypto theft of the year to date, behind the #Drift, #KelpDAO/#LayerZero, and @COLDCARDwallet exploits. The exploiter managed to bridge out only ~$6M to #Ethereum before Cronos paused the entire chain, leaving the remaining funds mainly stuck on Cronos. The exploiter has since started laundering the stolen funds, bridging them to #BTC (~200K so far) #Top hacks: TectonicFi: $74M Moonwell: $8.7M Termlabs: $8.5M Coinsbuy: $7.9M TAC: $7.5M Injective: $4.8M MANTRA: $3.6M BounceBit: $3M Cosmos Labs: $2.87M aquifer: $2.47M
10
20
326
0xBertto retweeted
Using crypto for tradfi is under valuing the technology’s potential for humanity. We need real innovators not trapped by immediate profit.
2
2
2
6
388
Now the fun part: findings, fixes, and verification. nitter.cf/usd8_fi/status/2087223…
USD8 contracts are now in audits. Free defi insurance coming very soon.
2
47
cover that follows the asset is the useful bit here
Get free DeFi insurance just by using Usd8 - a brand new DeFi primitive. Beta soon.
4
26
USD8 is built for - low risk defi - defi users need free insurance - fight malicious projects in crypto Beta soon.
1
5
2
9
367
We have the very first TEE powered insurance payout simulation results, it is looking good. Coming soon.
6
5
1
11
583
yeah, bridges keep proving the audit is only the starting line
1
5
36
point-in-time audits age badly once integrations start moving every week
3
22
i wouldnt swap tests for AI reviews, but using it between commits makes sense
2
14
creative with AI matters, but i still want the boring exploit path proven
1
8
agentic security is only useful when it shows the exploit path. another scanner dashboard doesnt change much
4
28
Most exploit writeups read like code failed. Usually it is less dramatic: some boring trust boundary got treated like a UI detail.
4
84
Hacks like this can not be eliminated by smart contract alone. Defi native insurance is desperately needed, and always will be.
🚨SlowMist TI Alert🚨 💸 @Ostium Loss: ~11,862,445 USDC 🔍 Root Cause: An authorized oracle signer was used to submit malicious price reports through a registered forwarder. The attacker provided validly signed but manipulated oracle data, which was accepted by the oracle verification mechanism. By repeatedly opening and closing trades with artificially favorable prices, the attacker generated artificial profits and drained funds from the OstiumVault. 📌 Attacker Address: 0xd1794196f0fc99c7f27970e661597d77d9a85869 📌 Victim Address: 0x20d419a8e12c45f88fda7c5760bb6923cee27f98 (vault) 📌 Vulnerable Contract: 0x0aebc4094b60ea4e21e937e80dafdd58c07c5ebb (OstiumPrivatePriceUpKeep impl) & 0xd456939e54f68ef9b0be62abb2ec4a37397cb814 (OstiumVerifier) Impact: The attacker exploited compromised oracle privileges to submit manipulated price reports and execute repeated profitable trades, draining ~11.86M USDC from the vault. Powered by SlowMist.AI Tx: arbiscan.io/tx/0x359f8c05b86…
1
2
5
353
Low risk Defi is the future for mass adoption.
1
5
151
Access control bugs are boring right up until one signer can move the whole loss path.
3
103
i keep coming back to these token/protocol deals where the app changes but the trust stack stays messy. Morpho can be the lending primitive, Coinbase the growth rail, Robinhood the distribution layer — the risk doesnt disappear, it just gets re-labeled.
131
Getting closer to minting :)
4
3
7
482
i keep thinking timelocks are less about slowing attackers and more about making control-plane risk visible. if nobody is watching the queue, the delay is just vibes w/ a countdown.
13
Defi projects I am excited about @usd8_fi — free DeFi insurance + hack recovery @3janexyz — onchain credit market @flexmeow — fixed-rate lending @angstromxyz — MEV-resistant Uniswap v4 DEX
2
2
6
343