Охват к подписчикам
22,9%
ERR
Реакции к просмотрам
0,22%
41 на 21 постов
Пересылки к просмотрам
1,07%
204
Постов в день
0,0
всего 21
Где отзываются чаще
доля реакций к просмотрам- 2 мар.https://evmresearch.io/index0,96%
- 8 мар.The AI Skills Explorer is a searchable database of AI skill files- structured prompts in YAML or markdown format-designed specifically for smart contract security auditing. These skills come from top security teams and researchers in the space, giving you battle-tested configurations you can drop directly into your workflow. https://smartcontractshacking.com/tools/ai-skills-explorer Follow for more @ethers_security0,80%
- 4 мар.I would call it a good beginning if you're considering to build a sec tool with AI superpowers Why it is worth a read 🌟 The article presents Amy, a semi-autonomously evolving, freely available open-source specialist smart contract auditor focused on Vault/ERC4626 protocols. While Amy can work with any AI platform, she self-evolved using Claude, which showed the best performance in their testing. What Amy can actually find 🥇 In internal testing on Cyfrin private audits, Amy has found Critical, High, Medium, and Low severity issues — some of which a Junior Auditor would be unlikely to catch. She can also find more complex bugs by defining a list of protocol invariants and attempting to break them, and can make recommendations to strengthen codebase defensiveness, something Junior Auditors typically don't do The bigger vision By open-sourcing Amy's Primer document, any auditor or developer can use and evolve her themselves, paying only the Claude compute cost. The author's hope is that the smart contract security community will embrace AI and collaboratively evolve an open-source collection of freely available specialist AI auditors. Source: https://dacian.me/using-claude-to-evolve-specialist-ai-smart-contract-auditors Amy: https://github.com/devdacian/ai-auditor-primers How to use Amy effectively? https://x.com/DevDacian/status/1945790783493423525?s=200,49%
- 25 февр.https://www.kali.org/blog/kali-llm-claude-desktop/0,47%
- 18 мар.NVIDIA Unveils NemoClaw: The Missing Security Layer for AI Agents OpenClaw exploded out of nowhere in January. An Austrian developer named Peter Steinberger built the first version in about an hour, and within weeks it became one of the fastest-growing open source projects in GitHub history- outpacing Linux's 30-year download record in just three weeks. The PROBLEM with autonomous agents OpenClaw's strength - broad, unchaperoned access to your system - is also its fundamental risk. Early versions had well - documented vulnerabilities around prompt injection and unconstrained file access. Most got patched, but no software fix can resolve the structural tension between an agent that needs wide access to be useful and an organization that can't afford to let AI roam freely through production systems. NVIDIA's answer, announced at GTC this week, is NemoClaw. What NemoClaw actually does? NVIDIA NemoClaw is an open source stack that adds privacy and security controls to OpenClaw. With one command, anyone can run always-on, self-evolving agents anywhere. NemoClaw uses NVIDIA Agent Toolkit software to secure OpenClaw. It installs NVIDIA OpenShell to enforce policy-based privacy and security guardrails, giving users control over how agents behave and handle data. It also evaluates available compute resources to run high-performance open models like NVIDIA Nemotron™ locally for enhanced privacy and cost efficiency. What's the catch? It's early. NVIDIA is describing NemoClaw as "alpha" and explicitly warns developers to expect rough edges. The sandbox orchestration isn't production-ready yet. The starting point, as they put it, is just "getting your own environment up and running." Also worth noting: Peter Steinberger, OpenClaw's creator, was recently acquihired by OpenAI. The project is now managed by a foundation to ensure vendor - neutral governance - but how that plays out as NVIDIA builds commercial tooling on top remains to be seen. Why this matters The McKinsey stat floating around is that 80% of organizations deploying AI agents have encountered "risky or unexpected behavior." The Alibaba incident from earlier this month - where an AI agent spontaneously started mining crypto and punching holes through firewalls - underscored just how real those risks are. NemoClaw doesn't solve the fundamental challenge of aligning autonomous systems with human intent. But it does provide the infrastructure layer that lets enterprises set boundaries, enforce policies, and actually audit what their agents are doing. Whether that becomes the industry standard or just one option among many will depend on adoption. But NVIDIA is betting big that when it comes to agent trust, enterprises will want to buy infrastructure rather than build it themselves. Useful Materials: • Good post from Kirill • You can try Nvidia Solution Here • Initial Nvidia Presentation Here0,47%
- 18 февр.First high-severity Solidity compiler bug since 2016 — identified by Hexens Hexens has identified a HIGH severity vulnerability in the Solidity compiler itself. Not in a specific project. In Solidity. The issue, TSTORE Poison, can silently corrupt contract storage and introduce critical vulnerabilities without obvious indicators. This makes it particularly dangerous for developers and auditors who rely on compiler-level guarantees. To assess the ecosystem-wide impact, we used Glider to scan integrated chains and evaluate the potential blast radius. Cross-chain impact analysis at this scale is exactly what Glider is designed for. 🔎 Technical write-up: https://hexens.io/research/solidity-compiler-bug-tstore-poison 📢 Official announcement: https://x.com/solidity_lang/status/2024181697168945228?s=46 If you develop or audit Solidity smart contracts, we strongly recommend reviewing the report0,29%
- 26 февр.OpenSourceMalware is a community-driven threat intel platform for tracking malicious packages across npm, PyPI, GitHub & more. Browse verified threats, share findings, and protect your dependencies🔒🤝 👉 https://opensourcemalware.com0,27%
- 12 февр.Aave V4 audit just got released by Trail Of Bits Available here0,26%
- 5 февр.Exploring the Security Risks of AI Assistants like OpenClaw https://www.hiddenlayer.com/research/exploring-the-security-risks-of-ai-assistants-like-openclaw0,22%
- 14 янв.🛡️ New protection against overflow errors in Go By default, Go ignores overflow in integer arithmetic operations, which hides serious vulnerabilities. The go-panikint project is a modified Go compiler that turns such overflows into explicit panics at runtime. This helps to find real bugs, like in Cosmos SDK RPC pagination, revealing previously invisible issues during fuzzing. 🔗 Details0,21%
- 17 окт. 2025 г.без подписи0,15%
- 1 авг.Great resource to study AI and different types of AI vulnerabilities https://riskatlas.principle.sg/0,11%