Great to be back on the @IslandDAO stage!
We audit @Solana projects in hand-picked cohorts. Here are the results so far
Cohort 1: IslandDAO projects, vulnerabilities found in every single one
Cohort 2: top projects of @SuperteamBR, first critical found within two hours
Cohort 3: live now and we are onboarding now, with limited spots available
The biggest crypto heist in history just happened
Thursday evening, the largest crypto exchange @binance got hit and about $6.3 billion was taken
Here’s how they did it 👇
The attackers got into one engineer’s laptop. From there they reached the system that approves Binance’s withdrawals and made it approve the transfers for them
They didn’t steal the secret keys, they made Binance’s own system sign the transactions, bypassing security measures
The attackers were well prepared, data shows they spent at least 36 hours preparing and rehearsing the whole attack before hitting
Then they emptied the wallets in about 20 minutes, pulling off the largest crypto theft in history
The good news is that actors in the ecosystem acted fast, roughly half the money has already been frozen by parties like @circle and @tether
It's expected Binance will be able to cover the rest so users don’t lose their money
Unfortunately we expect these types of attacks and incidents to only get worse for the foreseeable future as AI gets smarter and hackers continue to master it
Investing in your cybersecurity is now more important than ever
Binance has begun recovering affected assets for users and continues to work with law enforcement, issuers, blockchain intelligence firms and industry partners to trace, freeze and recover additional funds.
The company has already publicly committed to cover losses through company funds in the prior announcement.
Binance has already reserved over $6.34B of company funds to cover this incident. $5B of these funds are already held in the exact token assets that were impacted. We are completing the purchase of the remaining amount by buying token assets through market channels and OTC channels. We are doing this to match the format of the remaining token assets and address any asset shortfalls. This step can take longer because some tokens may have low liquidity and OTC settlement also takes time. We will share more progress as soon as we can.
These figures do not include frozen or protected assets, which remain subject to ongoing recovery and verification. Currently, $3bn has been frozen, with thanks to our industry partners. We are working with partners and law enforcement to recover the frozen assets.We will continue to use company resources to cover confirmed shortfall and will provide further verified updates as recovery efforts progress. Ultimately, all user funds will be verified publicly through our Proof of Reserves.
We will weather this storm. Thank you for the support.
For too long, high-quality security audits were a privilege reserved for well-funded projects
Not anymore
We’re proud to announce that we got to audit @cloak_ag, a @colosseum backed privacy project
Within the first 2 hours, we identified a critical vulnerability and worked with Cloak to patch it immediately. Funds are SAFU.
To support the next generation of Solana builders, we’re offering:
> 1 FREE full security audit for the next Colosseum Grand Prize winner
> 50% OFF security audits for every team accepted into the next Colosseum accelerator batch (full audit for only $2.5k)
AI has changed the game. Hackers find vulnerabilities faster than ever
Security needs to evolve just as fast.
We are Proof of Exploit, and we make security accessible to every builder on @solana
Replying to @OceaneXchange
It is, this chart shows the amount of new vulnerabilities found in software.
This changes everything
We won @islanddao V4
Now we're back for V5, but as a sponsor
Full circle. Good to be back.
6/ The demand is real.
Cohort 1: We audited 4 projects through @islanddao and found vulnerabilities in all of them
Cohort 2: We're now auditing 4 more projects in collaboration with @SuperteamBR
One of them is @cloak_ag, privacy rails on Solana, already live on mainnet with millions in volume and backed by @colosseum
5/ What we shipped during Colosseum:
→ Rebuilt the human-in-the-loop auditing process
→ An AI assistant to help researchers investigate vulnerabilities
→ 5 new security tools and Pinocchio support
→ Parallel audit runs and improved efficiency
→ Root-cause grouping to make findings more actionable
The goal: combine AI's speed with human security expertise, for efficient and high-quality audits
4/ Since then we haven’t stopped building, and we’ve been travelling all over the world.
We gave a security workshop together with @SuperteamTH
and just spent 2 weeks in The Garage with @SuperteamBR, building day and night.
Big thanks to @shimas_sol, @kukasolana and @kauenet for making it happen
3/ 4 months ago, none of this existed.
@SyotoshiX quit his job as an ethical hacker, having found 500+ vulnerabilities, sold his apartment and flew to Thailand
@RegiRegiRegi123 left his job as a security architect after 7 years securing blockchain systems for banks and defence
We met by coincidence at @IslandDAO, teamed up, and won the hackathon









