Helping Web3 teams build secure and resilient protocols
Joined November 2018
- Tweets1.4K
- Following584
- Followers3.5K
- Likes485
1/5 We’ve completed the security audit of @letsCatapult PULT token and its OFT integration, enabling cross-chain transfers of PULT across EVM networks through LayerZero V2
4/5 Our review focused on cross-chain supply consistency, fee calculation and accounting, transfer validation, and access control, including edge cases around zero-value transfers, invalid recipients, and token recovery
1
1
376
4/5 Have the plan before you need it. AI is breaking maths assumptions faster than expected. @drakefjustin's answer is Bunker Mode: Ethereum's emergency plan, ready in advance.
1
74
5/5 We're at Devcon all week. Find our Team Lead Pavel (t.me/plmorozov) and CTO Artem (xitter.twitterapi.xyz/cartlex) to chat in person
1
112
4/5 It also covers roles. Who can pause, upgrade or change parameters, and what happens if one of those keys goes wrong. Role-based risk analysis is a design question, and it is far cheaper to answer on a whiteboard than in a post-mortem.
1
58
5/5 Architecture assessments are part of what we do in Security Support at MixBytes. If you are sketching something new and want a second pair of eyes on the design, DM t.me/islandbuian
75
Landed in Mumbai for @EFDevcon 🇮🇳 The MixBytes team is in town 3–6 Nov. We’d love to hear what you’re building: DeFi, restaking, L2s, new lending designs, or anything that needs a second pair of eyes before mainnet.
DM CTO Artem (xitter.twitterapi.xyz/cartlex) or Team Lead Pavel (t.me/plmorozov), and we’ll find time at the venue or at side events.
2
4
464
1/5 We’ve completed the security audit of @BarterDeFi BarterLend, a fixed-term, fixed-yield lending protocol built around on-chain APR orderbooks
4/5 Our review focused on CreditPool accounting, order matching, loan lifecycle and liquidation logic, as well as integrations with external yield venues, Chainlink price feeds, and Permit2. The assessment also covered access control, reentrancy, rounding, oracle staleness, delegatecall safety, and economic edge cases
1
2
75