Martin @ShieldifyMartin

Co-Founder @ShieldifySec Taking your smart contracts' security seriously! telegram.me/MartinShieldify Joined April 2022

Tweets

2K
Followers

3K
Following

705
Likes

7K

Martin @ShieldifyMartin

12 hours ago

Do you remember all of those delta-neutral crypto trading strategies? Me neither

0 0 1 53 0

View Details

2026 has already seen billions lost to exploits and hacks, with more than $800M in losses over the last two months alone. Through it all, Multipli has maintained zero exposure. Grateful to our security partners and economic auditors who help us stay transparent and secure.

Shieldify Security @ShieldifySec

20 hours ago

The third @multiplifi audit report is coming out soon🫡 Read the previous ones: 1️⃣ github.com/shieldify-secu… 2️⃣ github.com/shieldify-secu…

1 4 19 4K 4

28 14 78 4K 3

View Details

Shieldify Security @ShieldifySec

20 hours ago

The third @multiplifi audit report is coming out soon🫡 Read the previous ones: 1️⃣ github.com/shieldify-secu… 2️⃣ github.com/shieldify-secu…

1 4 19 4K 4

View Details

Shieldify Security @ShieldifySec

a day ago

Hot take: manual auditing is still undefeated. AI catches patterns. Humans catch intent. ✌️

5 5 26 790 3

View Details

Martin @ShieldifyMartin

3 days ago

🔍 Off-chain Security Reviews In our latest Web2 audit, we found 8 High and 12 Medium issues over 21 audit days, covering architecture review, code analysis and testing. End-to-end security goes beyond smart contracts - it includes every component. 📄 Report in the comments.

2 1 7 549 2

View Details

Martin @ShieldifyMartin

2 days ago

@0x3b33 all in

0 0 3 114 0

View Details

Martin @ShieldifyMartin

2 days ago

If you're ready to work hard and deliver great results, even in a tough market, let me know 🫡

Shieldify Security @ShieldifySec

a week ago

|￣￣￣￣￣￣￣￣￣￣￣| We need a BD Engineer |＿＿＿＿＿＿＿＿＿＿＿| \ (•◡•) / \ / —— | | |_ |_

11 3 42 3K 7

1 0 2 359 0

View Details

Martin @ShieldifyMartin

2 days ago

@Kyriakos_Pelek Did not tracked this metric as it’s strongly dependent per issue

0 0 0 22 0

View Details

Martin @ShieldifyMartin

3 days ago

Full report: github.com/shieldify-secu…

0 0 2 393 1

View Details

Martin @ShieldifyMartin

4 days ago

Two Common Bugs in Using Rebase Tokens: - Caching the balance of ERC-20 tokens for gas efficiency breaks your logic if the token rebases. - Тhe amount specified in the transfer might not equal the change in balance due to rounding of the shares.

0 0 4 297 0

View Details

Martin @ShieldifyMartin

5 days ago

1. Unclaimed ETH Capture on First Mint If ETH is sent to the token contract before any minting, the first minter can effectively capture the entire balance, since they end up owning all initial shares.

1 1 3 295 0

View Details

Martin @ShieldifyMartin

5 days ago

Retweet, spread the knowledge 🫡

0 0 1 71 0

View Details

Martin @ShieldifyMartin

5 days ago

3. Rebase Timing Manipulation Rebase timing can be gamed: users can front-run or sandwich rebase transactions to inflate/deflate their position and extract value at the expense of others.

1 0 1 108 0

View Details

Martin @ShieldifyMartin

5 days ago

Three Common Bugs in Rebase Token Contracts 🧵 Rebase tokens look simple, but usually hide a lot of custom protocol logic under the hood. Small implementation mistakes can quietly lead to major value distortions or broken peg mechanics.

1 4 14 1K 5

View Details

Martin @ShieldifyMartin

6 days ago

The pull request with the @Zcash Critical bug fix. The most important step when a bug is found is the mitigation process. Everyone should have a plan prepared 🫡 github.com/zcash/orchard/…

0 0 6 199 2

View Details

Martin @ShieldifyMartin

6 days ago

Tested multiple AI security agents on codebases we had already audited. The results were disappointing. None of the most impactful bugs were identified. Our set of internal and external skills help the audit team to be far more effective. But AI still sucks at independent work.

1 3 6 312 0

View Details

Shieldify Security @ShieldifySec

6 days ago

Classic DeFi footgun: registerArbiter() shipped without access control. Anyone could self-assign the admin role, then withdraw - vault drained dev.to/rdin777/beyond…