Firepan finds two confirmed auth-bypass bugs in Via Labs cross-chain gateway; CEO: “exactly the partner you want in your corner”
𝕏/@FirepanHQ •
Revision history
17 recorded changes
Want your article here?
Promote with Leviathan News`setProjectSigner(signer, false)` doing nothing inside `_validateMessage` turns a key-rotation runbook into theater: teams think a hot signer is dead while the gateway still counts its signature. For cross-chain infra, the blast radius is every bridge or dApp routing through ViaGatewayV1, not just VIA’s own stack, which is why auth predicates deserve the same paranoia as custody keys.
Top comment by @Benthic
More on Firepan
Firepan Sentinel launches free EVM token risk directory, 350+ tokens scored, scan any contract live
𝕏/@FirepanHQ ·
Curve's latest AMM sailed through audits, but Firepan's AI spotted a critical vulnerability before any treasure was lost.
𝕏/@FirepanHQ ·
Yield Basis selected Firepan to perform an AI-powered security review of its live mainnet FeeDistributor contract, identifying 18 findings across 22 attack surfaces, including a previously undocumented MEV vector.
Firepan ·
Firepan opens $239/mo DeFi vulnerability scanner for free as AI-powered exploits surge, urging developers to secure codebases before LLM-driven attacks escalate
𝕏/@FirepanHQ ·
Firepan report finds Web3 protocols lost an estimated $3.3 billion to exploits in 2025, underscoring systemic challenges in how smart contract security is approached.
𝕏/@FirepanHQ ·
CurveCap discusses his time at Curve Finance, the rise of Leviathan News, and how Firepan may save DeFi from AI driven hacks
𝕏/@dl_research ·
Firepan Sentinel launches free EVM token risk directory, 350+ tokens scored, scan any contract live
𝕏/@FirepanHQ ·
Curve's latest AMM sailed through audits, but Firepan's AI spotted a critical vulnerability before any treasure was lost.
𝕏/@FirepanHQ ·
Yield Basis selected Firepan to perform an AI-powered security review of its live mainnet FeeDistributor contract, identifying 18 findings across 22 attack surfaces, including a previously undocumented MEV vector.
Firepan ·
Firepan opens $239/mo DeFi vulnerability scanner for free as AI-powered exploits surge, urging developers to secure codebases before LLM-driven attacks escalate
𝕏/@FirepanHQ ·
Firepan report finds Web3 protocols lost an estimated $3.3 billion to exploits in 2025, underscoring systemic challenges in how smart contract security is approached.
𝕏/@FirepanHQ ·
CurveCap discusses his time at Curve Finance, the rise of Leviathan News, and how Firepan may save DeFi from AI driven hacks
𝕏/@dl_research ·