BlockApex (@block_apex) header
BlockApex (@block_apex) profile picture

Security reviews and tokenomics consultation to the best teams working in Web 3. TG - @BlockapexSecurity RFQ : https://nitter.cf/t.co/9PvRD8CJsd

Dubai
Joined May 2021
Photo by BlockApex (@block_apex)Photo by BlockApex (@block_apex)Photo by BlockApex (@block_apex)Photo by BlockApex (@block_apex)Photo by BlockApex (@block_apex)Photo by BlockApex (@block_apex)Photo by BlockApex (@block_apex)Photo by BlockApex (@block_apex)Photo by BlockApex (@block_apex)Photo by BlockApex (@block_apex)
At BlockApex, we’ve always believed that security isn’t just about finishing an audit; it’s about building trust that scales. That’s why we put together the BlockApex Audit Dashboard: 👉reports.blockapex.io It’s not just a portfolio of audits, it’s a way to actually see the kind of impact security work makes: 1) Ecosystems Covered: From EVM to Solana, Cosmos to NEAR, you’ll see how wide our work spans 2) Code Reviewed: More than half a million lines of code audited (and counting) 3) Findings by Severity: A clear breakdown of critical, high, medium, and low vulnerabilities 4) Impact in Numbers: Every bug fixed means a safer experience for users, builders, and investors And here’s what makes it really useful: 🔍 You can click into issues and read their descriptions right on the dashboard 📁 By searching project categories, you can check what kinds of vulnerabilities typically show up in projects like the one you’re building 📚 All of this is open knowledge, and if you need to dig deeper, our auditors are here to help Most people treat “audit complete” as the finish line. We see it as where the real work begins. Our goal is simple: open up the black box of audits and make security measurable, comparable, and transparent. For founders, devs, and investors, this isn’t just a list of past work; it’s a living dataset showing how Web3 security is evolving, one audit at a time. 👉Have a look: reports.blockapex.io
1
8
2
14
1,789
Proud to share that our auditor @CyberGul has contributed an excellent resource for developers and security researchers diving into @CantonNetwork & DAML auditing 🔍 We’ve now added the repository to the @block_apex GitHub for broader access and continued contributions from the team. Check it out here: github.com/BlockApex/Canton-… Huge shoutout to @CyberGul for the effort put into this 👏
2
4
3
13
477
BlockApex retweeted
spent some time pulling my security work into one place 👇 web2 pentests → CEX audits → web3 protocol audits. Research. want to collab? DMs open github.com/gdroz3r/gdroz3r
1
2
1
18
1,145
Pakistan's first crypto startup! Congratulations Team @HandlePay0
This quoted post is unavailable.
6
183
Wishing a blessed Ramadan to all observing this holy month around the world. Ramadan Mubarak! 🌙💖
1
150
✨Happy New Year from BlockApex!✨ 2026 is here - and so is the next phase of Web3. As builders continue to push boundaries, security, resilience, and trust will remain the foundation of everything we ship on-chain. Here’s to a year of safer smart contracts, stronger ecosystems, and real innovation in Web3. 🚀 #HappyNewYear #Web3 #BlockchainSecurity #BlockApex
2
5
402
2025 was about proving what BlockApex is capable of. 2026 is about raising the bar. • $850M+ TVL secured • 7+ chains audited • 350+ findings across 33 projects • Top 5 finishes on @cantinaxyz & @code4rena • Internal tools built for next-gen audits Web3 security isn’t slowing down, and neither are we🔥
1
6
3
12
668
Some people hunt bounties. @CyberGul hunts edge cases.
Another Rare find @CyberGul just earned $400 for a query identifying misconfigured allowance retrieval that can return incorrect approval values. Submit yours before Dec 31. Query below:
1
1
5
199
Security is never optional, it’s the foundation. 🔐 Thrilled to partner with @Ensofi_xyz on this journey. Together, we’re building stronger, safer systems for the community. 🚀 Here’s to more secure milestones ahead! 🤝
How EnsoFi Delivers Sustainable Yields? Here’s how EnsoFi ensures security, transparency, and full control, while still offering real high yields: 💠Built on a market-driven lending model where lenders & borrowers agree on fair rates 💠 Rates move with real activity: supply ↔ demand adjust 1:1 between lenders and borrowers 💠 Audited smart contracts by @block_apex. Every transaction is on-chain verifiable for full transparency User safety isn’t an afterthought. It's the foundation of everything we build
1
168
Security underpins every meaningful step forward in Web3. 🔒 Solid move from @immunefi, the Security OS and the $IMU sale mark a big shift in how our industry approaches real protection at scale. More tooling, better coordination, and stronger defenses for the entire ecosystem. At @block_apex, we’re committed to strengthening this security stack alongside the teams pushing the industry forward. Proud to see this milestone go live. Join the movement: coinlist.co/immunefi 🚀
3
194
BlockApex has completed a thorough security audit for @ogprotocol using our Shift-Left Security approach on @Solana. A big step toward safer on-chain gaming ecosystems. 🔍 Explore the findings: reports.blockapex.io/report?… #ShiftLeftSecurity #OpenGaming #SecurityAudit #OGPLive
2
7
1
16
6,571
@ogprotocol (OGP) introduces an innovative framework that enables any token to launch its own “gamecoin” i.e., a tradable in-game currency linked to its parent token ecosystem. These gamecoins function as both gameplay rewards and on-chain assets, designed to align incentives among token holders, developers, players, and traders. By integrating gaming and DeFi mechanics, OGP aims to build an open, interoperable gaming economy on @solana
1
3
159
@ogprotocol embedded a security-first approach leading to a thorough review and getting a 90+ security rating. What is Shift-Left Security? Embedding audits early in the dev cycle, auditing each PR as it’s pushed. In web3, this approach catches vulnerabilities before deployment, reduces remediation costs, and keeps builders shipping secure, faster, and smarter. #ShiftLeftSecurity #Web3Security
3
127
We had a great evening at the Karachi @web3pak Networking Meetup. Our co-founder, @MujtabaRazaa, joined a fireside chat on DeFi in Pakistan: Opportunities & Challenges, alongside @wasifEth, who shared his perspective on how local talent can play a defining role in shaping Pakistan’s place in the global Web3 space. Javeria Faraz skillfully moderated the discussion. The evening concluded with valuable conversations and new connections across the ecosystem. It was a pleasure catching up with acquaintances from the industry, including @Ideofuzion, Startup Syndicate, and DigiEstate. Grateful to all who participated and contributed to such an engaging dialogue.
We had an amazing evening at the Karachi Web3 Networking Meetup. We had a fireside chat on DeFi in Pakistan, a keynote on RWA Tokenization, and great networking to close the night. Big thanks to our speakers and community partner Startup Syndicate supporting this meetup.
6
281
Security Advisory 🚨 NPM Supply Chain Attack Multiple popular NPM packages were compromised after a maintainer account takeover. Malicious versions exfiltrated secrets & crypto wallets. What does this mean in simple words? If you installed these packages in the last 48h: -Hackers could have copied your passwords & secret keys -If you stored a crypto wallet on your dev machine, it could be drained instantly -Even non-blockchain apps could be affected (API keys, database logins, cloud creds) Here’s what you need to know 👇
1
4
242
Recommendations Pin dependency versions in package.json Enforce MFA for all maintainer accounts Use dependency scanners (npm audit, socket.dev) Prefer signed/provenance-verified packages (SLSA, sigstore) Monitor build pipelines for unusual postinstall scripts
1
1
143
Takeaway!!! This incident is another reminder: Supply chain attacks are the #1 threat vector for both Web2 & Web3. 👉 Dependencies = trust. 👉 Treat them with the same rigor as your smart contracts.
1
107