web2 and web3 security, reverse engineering
Joined June 2017
- Tweets12
- Following294
- Followers190
- Likes113
Seems that someone is creating a huge number of deposit wallets via the @Polymarket relayer, pumping up the gas price on Polygon many times over from usual 100-200 gwei to 6k. >70k$ paid in the last 3 hours for fees on wallets creation via the wallet factory
Alexey Posikera retweeted
Most audits miss Web2.5
Smart contract auditors focus onchain. Backend devs trust the blockchain. But the real attack surface is the interaction between them.
Case study from our recent audit: double-spend via reverted tx secret leak + ECDSA mismatches.
blog.decurity.io/a-web2-5-vu…
Alexey Posikera retweeted
🧐 Your protocol was audited in 2022? That's exactly why it got hacked in 2025.
2025 was the year hackers went hunting through old, audited code — and rounding errors became million-dollar exploits.
Our breakdown of top 10 DeFi incidents of this year: 2025-recap.decurity.io/
Alexey Posikera retweeted
Ever audited Solana Anchor constraints with 20+ accounts and cross-checks everywhere?
Our own @passkeyra built a tool that turns them into visual graphs - red flags for missing checks pop out immediately.
blog.decurity.io/auditing-so…
Hi all, I published my new SuiSource MCP - github.com/PassKeyRa/suisour…
Now it has two tools that are useful for researchers - getting the local decompiled version of a package bytecode and collecting extended info about all packages of a project just by a single found package ID
For Sui packages decompilation the Revela decompiler is used - github.com/verichains/revela. The same decompiler produces the source code when you check it in the suiscan.xyz explorer
Alexey Posikera retweeted
Releasing our new IDA Pro plugin for analyzing Solana's eBPF programs developed by @dewardgnome. Check out the blog post: blog.decurity.io/reversing-s…
Alexey Posikera retweeted
1/n Introducing SolidityGPT.xyz - a GPT-based chatbot trained on @solidity_lang codebase and several Ethereum associated projects like @EthereumNetw , @optimismFND @arbitrum @0xPolygon @zksync, which helps devs to query technical questions around Solidity, Eth etc.
Alexey Posikera retweeted
We're glad to announce that our grant proposal for enhancing our @semgrep solidity rulepack has been approved by @compoundgrants.
The purpose is to develop new static analysis rules and adapt them for the Github pipelines of @compoundfinance.
We'll tweet soon about our progress!
