Alexey Posikera

Decurity team was cooking for the last few weeks. We were able to discover 0days that could've devastated the whole web3 industry if used by malicious actors. We're working hard to prevent it from happening.

Most audits miss Web2.5 Smart contract auditors focus onchain. Backend devs trust the blockchain. But the real attack surface is the interaction between them. Case study from our recent audit: double-spend via reverted tx secret leak + ECDSA mismatches. blog.decurity.io/a-web2-5-vu…

🧐 Your protocol was audited in 2022? That's exactly why it got hacked in 2025. 2025 was the year hackers went hunting through old, audited code — and rounding errors became million-dollar exploits. Our breakdown of top 10 DeFi incidents of this year: 2025-recap.decurity.io/

Ever audited Solana Anchor constraints with 20+ accounts and cross-checks everywhere? Our own @passkeyra built a tool that turns them into visual graphs - red flags for missing checks pop out immediately. blog.decurity.io/auditing-so…

Releasing our new IDA Pro plugin for analyzing Solana's eBPF programs developed by @dewardgnome. Check out the blog post: blog.decurity.io/reversing-s…

We're glad to announce that our grant proposal for enhancing our @semgrep solidity rulepack has been approved by @compoundgrants. The purpose is to develop new static analysis rules and adapt them for the Github pipelines of @compoundfinance. We'll tweet soon about our progress!