archethect 🏴 (@archethect) header
archethect 🏴 (@archethect) profile picture

Blockchain architect @hero_glyphs 𓂀, @soneta_xyz. Experience: ElizaOS @squidrouter plugin, co-founder @smolove__, @BattleFlyGame, @Nil__dao #ETH 🦇🔊

Joined August 2021
Photo by archethect 🏴 (@archethect)Photo by archethect 🏴 (@archethect)Photo by archethect 🏴 (@archethect)Photo by archethect 🏴 (@archethect)Photo by archethect 🏴 (@archethect)Photo by archethect 🏴 (@archethect)Photo by archethect 🏴 (@archethect)Photo by archethect 🏴 (@archethect)Photo by archethect 🏴 (@archethect)Photo by archethect 🏴 (@archethect)
It will all be allright anon. Take a deep breath of fresh air. This is a reminder to always keep some funds on the side and invest in long-term plays by DCA during the current market conditions. In the meantime, I'll be here building as always 🛠️. Echoes from a 2013 OG.
4
3
1
43
Got a connection request from the same LinkedIn profile. Be careful out there 🙏🙏🙏
差点上了web3面试骗局的当!我收到了自称 Euler Labs HR 的面试邀请,还加了领英看起来是真的。面试里一直在念稿,问你是啥电脑系统,还非要用VScode下载他们的项目,让露脸看看还跑去换人了。这个项目肉眼很难看出问题,但给 chatgpt 一看,马上原形毕露,幸好没有放松警惕。 @eulerfinance
2
4
197
If you're not already using open source and free skills to protect your projects... There is not much time left... @PashovAuditGrp has a wonderful repo. Please take a look and leverage it! github.com/pashov/ai-web3-se…
An open letter for a global surge in cyber defense, signed by over 100 organizations including Anthropic, AWS, Google, Microsoft, OpenAI, and Oracle.
3
1
10
609
archethect 🏴 retweeted
🚨🚨 axios SUPPLY CHAIN'ed !!! Here's a prompt to check if you're safe: > (paste to your claude code or so:) Audit my filesystem project for the following specific package versions in all package.json, package-lock.json, yarn.lock, and pnpm-lock.yaml files. For each package, tell me if it exists anywhere, and if so, which file. Then show me a summary table of all actual versions of those packages found and if vulnerable or not. Packages to check: * [email protected] * [email protected] * [email protected] < DM me if you need help, acting early is key here
1
2
1
8
972
A bug bounty program that rejects real bugs because they are “rare occurrences” is not a security program. It is a marketing page. The whole point of security research is to find the edge case before it becomes a postmortem. If a catastrophic state is possible and there is no guard, the issue is real. Probability is not a mitigation. “Rare” does not protect funds. “Unlikely” does not secure code. And teams that hide behind that logic should not be surprised when serious researchers stop taking their programs seriously.
3
9
335
Many such cases sadly....
2
3
196
Luckily there is BattleChain from @cyfrin My take... this shifts the entire bug bounty landscape. If you don't onboard on a similar platform, whitehats will skip you. nitter.cf/cyfrin/status/20369455…
As of today, BattleChain testnet is LIVE. The pre-mainnet, post-testnet blockchain, where whitehats legally attack your smart contracts before they reach production. Deploy. Get attacked. Ship stronger. Here's why we built it, what it is, and how you can get involved 🧵
4
232
archethect 🏴 retweeted
Autonomous Audit Skills V1 benchmark is out 🔥 🏆 Current category lead is solidity-auditor by @pashov A benchmark is NOT: - One-off execution against a contract - One person deciding the pre-conditions - Single category ( e.g. not just a full audit skill ) 🧪➡️ Anyone can contribute to the accuracy of this benchmark right now: forefy.com/benchmarks/f93b6e…
I solved Auditing Skills Benchmarking for us with 🤍opensource and only for fun and better audits 🤍autoresearch loop 🤍deterministic contests hosting it at forefy.com/benchmarks - benchmark per category (best at logic problems? best at math problems? best poc generator?) - deterministic score (not your typical AI testing AI) - opensource versioned benchmarks, you can create a benchmark or submit benchmark execution results at a cost of several tokens (run locally via your agent) - cross-model scoring, cross-env differentiation sums - autoresearch incentive to run - if you run it locally you are not only contributing to the truth of the benchmark, but also IMPROVE LOCALLY the version of your skill, just for yourself (share if you want but don't have to) - safe self-benchmarking is possible via commit-pinned, audited skills (you're running audited skills in the benchmark loop) - don't want to run? just enjoy knowing the best skills out there per your use-case - clear benchmark winner leaderboards - yeah, we will also benchmark all-in-one audit skills (anything from the auditor skill registry) benchmarks repo: github.com/forefy/benchmarks How to contribute / benefit: - watch for upcoming benchmarks this week (comment below for skills you want to see benchmarked✨✨) - improve the accuracy of published benchmarks by logging in and running your own (only need a few tokens and a agentic CLI) - if you're confused on how to contribute DM me - I heard @archethect is cooking some serious stuff !! and has helped me set this weekend project in motion 🔥 🔁 Repost to have more people contributing and improve benchmark truthfullness !!!
9
3
2
56
6,783
Take notice because this is incredibly well thought out and the next iteration in objective benchmarking for AI tools! Give the man a follow and check it out🔥
I solved Auditing Skills Benchmarking for us with 🤍opensource and only for fun and better audits 🤍autoresearch loop 🤍deterministic contests hosting it at forefy.com/benchmarks - benchmark per category (best at logic problems? best at math problems? best poc generator?) - deterministic score (not your typical AI testing AI) - opensource versioned benchmarks, you can create a benchmark or submit benchmark execution results at a cost of several tokens (run locally via your agent) - cross-model scoring, cross-env differentiation sums - autoresearch incentive to run - if you run it locally you are not only contributing to the truth of the benchmark, but also IMPROVE LOCALLY the version of your skill, just for yourself (share if you want but don't have to) - safe self-benchmarking is possible via commit-pinned, audited skills (you're running audited skills in the benchmark loop) - don't want to run? just enjoy knowing the best skills out there per your use-case - clear benchmark winner leaderboards - yeah, we will also benchmark all-in-one audit skills (anything from the auditor skill registry) benchmarks repo: github.com/forefy/benchmarks How to contribute / benefit: - watch for upcoming benchmarks this week (comment below for skills you want to see benchmarked✨✨) - improve the accuracy of published benchmarks by logging in and running your own (only need a few tokens and a agentic CLI) - if you're confused on how to contribute DM me - I heard @archethect is cooking some serious stuff !! and has helped me set this weekend project in motion 🔥 🔁 Repost to have more people contributing and improve benchmark truthfullness !!!
1
5
342
archethect 🏴 retweeted
5 new AI security tools added to the Web3 Security AI tools and Skills Collection🫡 Free, Open Sourced, Paid, Closed Sourced - everybody is building one, they are all listed here. 50 stars already and counting⭐️
8
15
2
122
5,422
archethect 🏴 retweeted
over the last few weeks i've been deep in @ethskills the ecosystem has mass amounts of skills and mcp servers, so i put together a combined ethereum ai skills overview that pulls everything together here's a sneak peek of everything on the list 🧵👇
4
6
1
27
2,367
archethect 🏴 retweeted
🧠AI security tools are booming. Still, many are slow, painful to set up or expensive to run. solidity-auditor v2 drops tomorrow. 1 command install. 8 parallel specialist agents. <10min on 5000 nSLOC. Runs locally on a cheap API plan. Free (even though it probably shouldn't be)
26
14
3
215
10,345
The ultimate list of AI security tools!! If you have one that is not on the list, create a PR to add it so we can all make this space safer, one step at a time 🙏
Everyone is shipping AI security tools now. We went through them so you don't have to. 35 tools reviewed - Claude Code skills, standalone scanners, paid platforms. Hand-picked, not bulk imported. Drop the one AI security tool that you love the most🫡
2
7
773
archethect 🏴 retweeted
Open source skills are quickly gaining on proprietary "audit" agents. Also, the pitch for proprietary agents is: "we're not at the level of auditors but we're cheap and we do get close" Open source provides an even better cost-benefit ratio.
2
1
12
897
So this happened... The famouns "You're absolutely right..." 🫠 Don't trust AI blindly! Make sure you hire a top security researcher which leverages AI tools.
1
16
993
archethect 🏴 retweeted
Replying to @hrkrshnn
Yo finding 2 Novel vulnerabilities FREE truly is impressive😎 GJ with Apex finding 5 smart contract with 18 fullstack!! Btw, I think there is one tool missing, that found 2 new Novel Vulnerabilities after your run nitter.cf/archethect/status/2032…
2 new findings from sc-auditor V2 AFTER 20+ AI audit tools ran over @z0r0zzz Majeur repo!! 👀 Try it out yourself and check all the reports on github.com/z0r0z/majeur Some GOATed tools over there like the one from @pashov
1
1
17
3,129
archethect 🏴 retweeted
One application of AI that I am excited about is AI-assisted formal verification of code and bug finding. Right now ethereum's biggest technical risk probably is bugs in code, and anything that could significantly change the game on that would be amazing.
2,728
1,957
709
11,921
3,575,392
2 new findings from sc-auditor V2 AFTER 20+ AI audit tools ran over @z0r0zzz Majeur repo!! 👀 Try it out yourself and check all the reports on github.com/z0r0z/majeur Some GOATed tools over there like the one from @pashov
Replying to @archethect
Ran it blind on Majeur by @z0r0zzz. No prior knowledge of known vulns. Results: - 16 confirmed findings - 0 false positives - 8 findings the AI initially flagged... then caught its own mistakes and discarded The system self-corrected 8 false positives before a human ever saw them. 👇
2
33
6,745
Couldn't have worded it myself better 🙏 The tool is unique because: * It minimizes false positives through Devils Advocate deathmatch... 2 agents head to head 🥊 * Still gets very high signal with lots of actual valid findings * Was able to find 2 novel vulnerabilities even AFTER @cantinaxyz 's tool ran over it. Have some novel ideas for V3 😎
Someone ran his AI tool and found 18 valid vulnerabilities, including 2 Highs and 5 Medium ones on a security contest on Sherlock🔥 What's more interesting is that he also found 2 novel vulnerabilities on "Majeur" protocol built by @z0r0zzz even after the run of Cantina's tool🤯
1
1
15
1,950
I spent weeks trying to solve one problem: AI auditors find bugs. They also hallucinate bugs that don't exist. Security researchers know this. It's why most dismiss AI auditing tools. So I asked: what if the AI had to prove itself wrong before it could prove itself right? 🧵👇
3
33
2,372
Under the hood: - 6 adversarial hunt lanes (inspired by @pashov 's methodology) - Recursive proof invalidation... not confidence scores - Every discarded FP has a full paper trail - Foundry PoCs generated as proof - Open source Claude Code plugin 🔓
1
8
1,416
The problem was never "can AI find bugs." It always could. The problem was "can AI shut up about bugs that aren't real." Turns out you just needed a second AI whose entire purpose is to call bullshit. sc-auditor V2 is live, open source and a substantional improvement over V1 at that! 👇 github.com/Archethect/sc-aud…
3
2
33
1,845