@salus_sec has finished its audit on major smart contracts involving capital flows in Shorter Finance, substantially neglecting the impending potential dangers. Code security should NEVER be pulled off DEFCON 3!
A memorable landmark in this era overwhelmed with hackers
14 years ago, Satoshi created the #Bitcoin whitepaper. In the past 14 years, we've seen so many talented #BUIDLers in the industry making its future bright and promising. #SalusSecurity is proud to be a player in the security field to contribute to the industry's future.
For all web3 projects, we’re thrilled to announce that Trust EVM has reached a partnership with Salus Security @salus_sec !!
Projects built on @TrustEvm will be empowered with Salus Security.
Partnership announcementhttps://medium.com/@trustevm/trust-evm-with-salus-security-to-bring-quality-security-solutions-to-web3-projects-4764ce65b5fa…
Find out how #BNBChain's European Innovation Incubator could have a determining impact on your project.
Join us on Thursday for an #AMA with participating mentors. We'll be alongside
such as development specifications and testing guidelines before auditing, as well as prediction of project attack vectors. The scope of auditing should be extended throughout the life cycle of a project, the blockchain audit industry also needs new standards.
2) Immediacy and automaticity. Current risk notifications do not yet reach users quickly; even if they do, the event has occurred in most cases, and most users lag behind in their actions.
1) Understandability. The output should be comprehensible to the ordinary user (e.g., token detection). Otherwise, the user's trust comes entirely from faith in the reputation of the reviewing org.
: On the merge - there are some security tradeoffs that'll happen. On the positive side, block producers will now have skin in the game so less incentive to be malicious.
Preparation towards an audit is also super valuable, as it forces the team to view their code from a different perspective. Also, audits only cover the code: operational security is also critical to a project.
However, changes in block production could have effects on protocols that depend on it, such as multi-block oracles.
Audits are no silver bullet. If a project wasn't built from the ground up with high-quality security and engineering practices, an audit can only do so much.
Audits are not a panacea, but rather a very important part of a good security culture. They should not be overlooked but also not presented as the end all be all!
Come to join our event “ What’s Next” featuring security and ETH community gathering, welcome guests @GoplusSecurity@Mudit__Gupta@smpalladino to speak on the panel!#ETH#devcon2022#ETHGLOBAL#ETHBogota
Event Time: 5-9 PM, OCT 12th
https://eventbrite.com/e/so-whats-next-tickets-431479586057…
European Innovation Incubator. As an all-rounded blockchain security company, we'll try our best to support early star-up projects with our safe experience in both blockchain and traditional security.
Our European Innovation Incubator will see us partner with a list of some of the biggest names in #Web3
With leading VC’s like @jump_, @KeyrockTrading, @skylandvc, @MH_Ventures@HashGlobal and @BinanceLabs projects will be pitching for considerable backing
[1/7]
Thorough security #audits like those conducted by Salus Security are essential in identifying and addressing these vulnerabilities, and we will continue to work tirelessly in our efforts to keep the web safe for everyone.
One of the key areas we've been focusing on is the security vulnerabilities that exist in both web2 and web3 systems. These include software bugs, supply chain vulnerabilities, phishing and fraud, leaked private data or keys, and denial of service attacks.
At #SalusSecurity, we're dedicated to ensuring that #web3 is as secure and scalable as possible, and we've been having some great discussions on the topic with industry experts.
In order to protect GameFi project's billions of digital assets, #Salus examines thoroughly and rigorously a variety of GameFi projects, confronts hackers, and is an expert in these fields.
Any protocol's most frequent flaw resides in the smart contract code that controls network transactions. The infrastructures on top of which a GameFi project is built may have vulnerabilities that have been carried over, as well as zero-day exploits, con artists, and developers.
Today, we'll examine the #GameFi's weakness in more detail. The most recent breakthroughs in GameFi have raised millions of dollars to create games that support the innovative "play to earn" model. Similar to DeFi, GameFi has a number of widespread security flaws.
Salus Security uses checks for flaws like duplicate minting related to reentrancy attack, Missing Protection against Signature Replay Attacks, NFT flash loans, Force Feeding caused forced minting, and more to target the common vulnerabilities in NFT areas.
Today we talk about #NFT risks, and #Salus Security brings the expertise to secure everyone’s digital assets.
There’re a few examples of recent NFT hacks: OpenSea Low-Price Exploit, Full Send Metacard, LooksRare DDoS Attack, Lympo Hot Wallet Security Breach, etc.