
Security reviews and tokenomics consultation to the best teams working in Web 3. TG - @BlockapexSecurity RFQ : https://nitter.cf/t.co/9PvRD8CJsd
Dubai
Joined May 2021
- Tweets1.3K
- Following126
- Followers3.9K
- Likes732
Pinned Tweet
At BlockApex, we’ve always believed that security isn’t just about finishing an audit; it’s about building trust that scales.
That’s why we put together the BlockApex Audit Dashboard: 👉reports.blockapex.io
It’s not just a portfolio of audits, it’s a way to actually see the kind of impact security work makes:
1) Ecosystems Covered: From EVM to Solana, Cosmos to NEAR, you’ll see how wide our work spans
2) Code Reviewed: More than half a million lines of code audited (and counting)
3) Findings by Severity: A clear breakdown of critical, high, medium, and low vulnerabilities
4) Impact in Numbers: Every bug fixed means a safer experience for users, builders, and investors
And here’s what makes it really useful:
🔍 You can click into issues and read their descriptions right on the dashboard
📁 By searching project categories, you can check what kinds of vulnerabilities typically show up in projects like the one you’re building
📚 All of this is open knowledge, and if you need to dig deeper, our auditors are here to help
Most people treat “audit complete” as the finish line. We see it as where the real work begins.
Our goal is simple: open up the black box of audits and make security measurable, comparable, and transparent.
For founders, devs, and investors, this isn’t just a list of past work; it’s a living dataset showing how Web3 security is evolving, one audit at a time.
👉Have a look: reports.blockapex.io
Proud to share that our auditor @CyberGul has contributed an excellent resource for developers and security researchers diving into @CantonNetwork & DAML auditing 🔍
We’ve now added the repository to the @block_apex GitHub for broader access and continued contributions from the team.
Check it out here:
github.com/BlockApex/Canton-…
Huge shoutout to @CyberGul for the effort put into this 👏
BlockApex retweeted
spent some time pulling my security work into one place
👇
web2 pentests → CEX audits → web3 protocol audits.
Research.
want to collab? DMs open
github.com/gdroz3r/gdroz3r
Pakistan's first crypto startup!
Congratulations Team @HandlePay0
This quoted post is unavailable.
✨Happy New Year from BlockApex!✨
2026 is here - and so is the next phase of Web3.
As builders continue to push boundaries, security, resilience, and trust will remain the foundation of everything we ship on-chain.
Here’s to a year of safer smart contracts, stronger ecosystems, and real innovation in Web3. 🚀
#HappyNewYear #Web3 #BlockchainSecurity #BlockApex
2025 was about proving what BlockApex is capable of.
2026 is about raising the bar.
• $850M+ TVL secured
• 7+ chains audited
• 350+ findings across 33 projects
• Top 5 finishes on @cantinaxyz & @code4rena
• Internal tools built for next-gen audits
Web3 security isn’t slowing down, and neither are we🔥
Security is never optional, it’s the foundation. 🔐
Thrilled to partner with @Ensofi_xyz on this journey.
Together, we’re building stronger, safer systems for the community. 🚀
Here’s to more secure milestones ahead! 🤝
How EnsoFi Delivers Sustainable Yields?
Here’s how EnsoFi ensures security, transparency, and full control, while still offering real high yields:
💠Built on a market-driven lending model where lenders & borrowers agree on fair rates
💠 Rates move with real activity: supply ↔ demand adjust 1:1 between lenders and borrowers
💠 Audited smart contracts by @block_apex. Every transaction is on-chain verifiable for full transparency
User safety isn’t an afterthought. It's the foundation of everything we build
Security underpins every meaningful step forward in Web3. 🔒
Solid move from @immunefi, the Security OS and the $IMU sale mark a big shift in how our industry approaches real protection at scale. More tooling, better coordination, and stronger defenses for the entire ecosystem.
At @block_apex, we’re committed to strengthening this security stack alongside the teams pushing the industry forward.
Proud to see this milestone go live.
Join the movement: coinlist.co/immunefi 🚀
BlockApex has completed a thorough security audit for @ogprotocol using our Shift-Left Security approach on @Solana.
A big step toward safer on-chain gaming ecosystems.
🔍 Explore the findings: reports.blockapex.io/report?…
#ShiftLeftSecurity #OpenGaming #SecurityAudit #OGPLive
@ogprotocol (OGP) introduces an innovative framework that enables any token to launch its own “gamecoin” i.e., a tradable in-game currency linked to its parent token ecosystem.
These gamecoins function as both gameplay rewards and on-chain assets, designed to align incentives among token holders, developers, players, and traders.
By integrating gaming and DeFi mechanics, OGP aims to build an open, interoperable gaming economy on @solana
@ogprotocol embedded a security-first approach leading to a thorough review and getting a 90+ security rating.
What is Shift-Left Security?
Embedding audits early in the dev cycle, auditing each PR as it’s pushed.
In web3, this approach catches vulnerabilities before deployment, reduces remediation costs, and keeps builders shipping secure, faster, and smarter.
#ShiftLeftSecurity #Web3Security
We had a great evening at the Karachi @web3pak Networking Meetup.
Our co-founder, @MujtabaRazaa, joined a fireside chat on DeFi in Pakistan: Opportunities & Challenges, alongside @wasifEth, who shared his perspective on how local talent can play a defining role in shaping Pakistan’s place in the global Web3 space. Javeria Faraz skillfully moderated the discussion.
The evening concluded with valuable conversations and new connections across the ecosystem. It was a pleasure catching up with acquaintances from the industry, including @Ideofuzion, Startup Syndicate, and DigiEstate.
Grateful to all who participated and contributed to such an engaging dialogue.
Security Advisory 🚨
NPM Supply Chain Attack
Multiple popular NPM packages were compromised after a maintainer account takeover. Malicious versions exfiltrated secrets & crypto wallets.
What does this mean in simple words?
If you installed these packages in the last 48h:
-Hackers could have copied your passwords & secret keys
-If you stored a crypto wallet on your dev machine, it could be drained instantly
-Even non-blockchain apps could be affected (API keys, database logins, cloud creds)
Here’s what you need to know 👇
Recommendations
Pin dependency versions in package.json
Enforce MFA for all maintainer accounts
Use dependency scanners (npm audit, socket.dev)
Prefer signed/provenance-verified packages (SLSA, sigstore)
Monitor build pipelines for unusual postinstall scripts
Takeaway!!!
This incident is another reminder: Supply chain attacks are the #1 threat vector for both Web2 & Web3.
👉 Dependencies = trust.
👉 Treat them with the same rigor as your smart contracts.















