Pinned Tweet
4 months ago we both quit our jobs to build something we believe in
Met by coincidence, won a hackathon, and never stopped building
We just submitted Proof of Exploit to @colosseum 🔓
Here's what we've built, why we built it and how we got here 🧵
Great to be back on the @IslandDAO stage!
We audit @Solana projects in hand-picked cohorts. Here are the results so far
Cohort 1: IslandDAO projects, vulnerabilities found in every single one
Cohort 2: top projects of @SuperteamBR, first critical found within two hours
Cohort 3: live now and we are onboarding now, with limited spots available
Apply for Cohort 3 at proofofexploit.com
Proof of Exploit retweeted
The biggest crypto heist in history just happened
Thursday evening, the largest crypto exchange @binance got hit and about $6.3 billion was taken
Here’s how they did it 👇
The attackers got into one engineer’s laptop. From there they reached the system that approves Binance’s withdrawals and made it approve the transfers for them
They didn’t steal the secret keys, they made Binance’s own system sign the transactions, bypassing security measures
The attackers were well prepared, data shows they spent at least 36 hours preparing and rehearsing the whole attack before hitting
Then they emptied the wallets in about 20 minutes, pulling off the largest crypto theft in history
The good news is that actors in the ecosystem acted fast, roughly half the money has already been frozen by parties like @circle and @tether
It's expected Binance will be able to cover the rest so users don’t lose their money
Unfortunately we expect these types of attacks and incidents to only get worse for the foreseeable future as AI gets smarter and hackers continue to master it
Investing in your cybersecurity is now more important than ever
Binance has begun recovering affected assets for users and continues to work with law enforcement, issuers, blockchain intelligence firms and industry partners to trace, freeze and recover additional funds.
The company has already publicly committed to cover losses through company funds in the prior announcement.
Binance has already reserved over $6.34B of company funds to cover this incident. $5B of these funds are already held in the exact token assets that were impacted. We are completing the purchase of the remaining amount by buying token assets through market channels and OTC channels. We are doing this to match the format of the remaining token assets and address any asset shortfalls. This step can take longer because some tokens may have low liquidity and OTC settlement also takes time. We will share more progress as soon as we can.
These figures do not include frozen or protected assets, which remain subject to ongoing recovery and verification. Currently, $3bn has been frozen, with thanks to our industry partners. We are working with partners and law enforcement to recover the frozen assets.We will continue to use company resources to cover confirmed shortfall and will provide further verified updates as recovery efforts progress. Ultimately, all user funds will be verified publicly through our Proof of Reserves.
We will weather this storm. Thank you for the support.
Proof of Exploit retweeted
For too long, high-quality security audits were a privilege reserved for well-funded projects
Not anymore
We’re proud to announce that we got to audit @cloak_ag, a @colosseum backed privacy project
Within the first 2 hours, we identified a critical vulnerability and worked with Cloak to patch it immediately. Funds are SAFU.
To support the next generation of Solana builders, we’re offering:
> 1 FREE full security audit for the next Colosseum Grand Prize winner
> 50% OFF security audits for every team accepted into the next Colosseum accelerator batch (full audit for only $2.5k)
AI has changed the game. Hackers find vulnerabilities faster than ever
Security needs to evolve just as fast.
We are Proof of Exploit, and we make security accessible to every builder on @solana
The biggest crypto heist in history just happened
Thursday evening, the largest crypto exchange @binance got hit and about $6.3 billion was taken
Here’s how they did it 👇
The attackers got into one engineer’s laptop. From there they reached the system that approves Binance’s withdrawals and made it approve the transfers for them
They didn’t steal the secret keys, they made Binance’s own system sign the transactions, bypassing security measures
The attackers were well prepared, data shows they spent at least 36 hours preparing and rehearsing the whole attack before hitting
Then they emptied the wallets in about 20 minutes, pulling off the largest crypto theft in history
The good news is that actors in the ecosystem acted fast, roughly half the money has already been frozen by parties like @circle and @tether
It's expected Binance will be able to cover the rest so users don’t lose their money
Unfortunately we expect these types of attacks and incidents to only get worse for the foreseeable future as AI gets smarter and hackers continue to master it
Investing in your cybersecurity is now more important than ever
Binance has begun recovering affected assets for users and continues to work with law enforcement, issuers, blockchain intelligence firms and industry partners to trace, freeze and recover additional funds.
The company has already publicly committed to cover losses through company funds in the prior announcement.
Binance has already reserved over $6.34B of company funds to cover this incident. $5B of these funds are already held in the exact token assets that were impacted. We are completing the purchase of the remaining amount by buying token assets through market channels and OTC channels. We are doing this to match the format of the remaining token assets and address any asset shortfalls. This step can take longer because some tokens may have low liquidity and OTC settlement also takes time. We will share more progress as soon as we can.
These figures do not include frozen or protected assets, which remain subject to ongoing recovery and verification. Currently, $3bn has been frozen, with thanks to our industry partners. We are working with partners and law enforcement to recover the frozen assets.We will continue to use company resources to cover confirmed shortfall and will provide further verified updates as recovery efforts progress. Ultimately, all user funds will be verified publicly through our Proof of Reserves.
We will weather this storm. Thank you for the support.
Proof of Exploit retweeted
Islanddao Demo Day 🇧🇷 nitter.cf/i/broadcasts/2BlOAgNBn…
For too long, high-quality security audits were a privilege reserved for well-funded projects
Not anymore
We’re proud to announce that we got to audit @cloak_ag, a @colosseum backed privacy project
Within the first 2 hours, we identified a critical vulnerability and worked with Cloak to patch it immediately. Funds are SAFU.
To support the next generation of Solana builders, we’re offering:
> 1 FREE full security audit for the next Colosseum Grand Prize winner
> 50% OFF security audits for every team accepted into the next Colosseum accelerator batch (full audit for only $2.5k)
AI has changed the game. Hackers find vulnerabilities faster than ever
Security needs to evolve just as fast.
We are Proof of Exploit, and we make security accessible to every builder on @solana
Proof of Exploit retweeted
Welcome to the Nexusol directory, @ProofOfExploit 👋
Smart contract audits for early-stage Solana teams, before mainnet:
→ flat $5,000, report in 7 days
→ a working exploit for every finding that matters
→ free re-audit after you patch
Check them Out NOW 👇
nexusol.app/app/ecosystem/pr…
Show up IRL, It works.
Next up: @hackerhouses London and @solana Breakpoint.
If you’re there, come say hi. DMs are open.
JUST SHOW UP IRL
@Arcium: @yrschrade ran into his co-founder "literally at the front door" of Solana @hackerhouses, Prague
@ProofofExploit: a couple of builders met at @islanddao and left as co-founders
@orca_so: @mikeyoo_k got hired after meeting the core team at Seoul Hacker House, four years ago
hacker house london goes live in <1 week! what will your story be?
Security is changing right in front of us
AI finds holes faster than ever
Gave the @islanddao builders an urgent briefing this morning
Rotate your keys
Update your systems
Watch for the newest patches
🚨 Hackers are using powerful AI and it's causing a global cybersecurity crisis
> PHP runs 70% of the internet and just got two critical holes exposed
> LiteLLM, a popular AI library, was backdoored and steals keys from anyone who installed it
> Node.js and Next.js, the base of most web apps, shipped critical fixes
And more...
This is the tech most crypto companies run on, if you're a builder:
> Rotate every key. API, SSH, cloud, deploy.
> Update everything. PHP, Node, Next.js, your dependencies.
> Keep an eye on the latest patches
Don't assume these hackers will skip you
They won't, and your users pay for it
We won @islanddao V4
Now we're back for V5, but as a sponsor
Full circle. Good to be back.
When the community writes your pitch for you 💜
Thank you @AnekoGameFi, shoutout to @SuperteamTH and @SuperteamBR backing us to do this
Superteam is a cheat code
#MadeinThailand4Solana
Getting your smart contract audited is a must, but for small teams it can cost more than the whole build. @ProofOfExploit wants to fix that 🔓
They do hybrid audits for early-stage @Solana projects. Their engine and security tools scan the code first, then real researchers check every finding by hand.
Anything serious comes with a working exploit, so founders know which bugs actually matter. You also get step-by-step fixes, a free re-audit after patching, and an audited badge.
It's run by two founders, an ethical hacker and a security architect, who quit their jobs 4 months ago to build this. They also ran a security workshop with @SuperteamTH. Fixing bugs before launch beats fixing them after, every time
proofofexploit.com
Build with @SuperteamTH
@SuperteamBR 🩷 started with @islanddao
@Colosseum @Solana #cryptoworldfair
Proof of Exploit retweeted
#MadeinThailand4Solana
Getting your smart contract audited is a must, but for small teams it can cost more than the whole build. @ProofOfExploit wants to fix that 🔓
They do hybrid audits for early-stage @Solana projects. Their engine and security tools scan the code first, then real researchers check every finding by hand.
Anything serious comes with a working exploit, so founders know which bugs actually matter. You also get step-by-step fixes, a free re-audit after patching, and an audited badge.
It's run by two founders, an ethical hacker and a security architect, who quit their jobs 4 months ago to build this. They also ran a security workshop with @SuperteamTH. Fixing bugs before launch beats fixing them after, every time
proofofexploit.com
Build with @SuperteamTH
@SuperteamBR 🩷 started with @islanddao
@Colosseum @Solana #cryptoworldfair
Proof of Exploit retweeted
4 months ago we both quit our jobs to build something we believe in
Met by coincidence, won a hackathon, and never stopped building
We just submitted Proof of Exploit to @colosseum 🔓
Here's what we've built, why we built it and how we got here 🧵
6/ The demand is real.
Cohort 1: We audited 4 projects through @islanddao and found vulnerabilities in all of them
Cohort 2: We're now auditing 4 more projects in collaboration with @SuperteamBR
One of them is @cloak_ag, privacy rails on Solana, already live on mainnet with millions in volume and backed by @colosseum
7/ We're soon opening applications for Cohort 3
Building on Solana and haven't had your smart contracts audited yet?
Book a call at ProofOfExploit.com or DM us to get started!
2/ Founders have two options today:
- A manual audit they trust but often can't afford, costing up to $50K
- An AI auditor they can afford but may not fully trust
So many early-stage projects ship to mainnet without a proper audit
We want to change that.
Our offer?
Trusted and affordable audits for Solana. $5K flat.
A human researcher leads every audit, while our AI security engine does the heavy lifting
5/ What we shipped during Colosseum:
→ Rebuilt the human-in-the-loop auditing process
→ An AI assistant to help researchers investigate vulnerabilities
→ 5 new security tools and Pinocchio support
→ Parallel audit runs and improved efficiency
→ Root-cause grouping to make findings more actionable
The goal: combine AI's speed with human security expertise, for efficient and high-quality audits
4/ Since then we haven’t stopped building, and we’ve been travelling all over the world.
We gave a security workshop together with @SuperteamTH
and just spent 2 weeks in The Garage with @SuperteamBR, building day and night.
Big thanks to @shimas_sol, @kukasolana and @kauenet for making it happen
3/ 4 months ago, none of this existed.
@SyotoshiX quit his job as an ethical hacker, having found 500+ vulnerabilities, sold his apartment and flew to Thailand
@RegiRegiRegi123 left his job as a security architect after 7 years securing blockchain systems for banks and defence
We met by coincidence at @IslandDAO, teamed up, and won the hackathon

















