Before mainnet, there's Battlechain. The adversarial L2 for mainnet-bound protocols.
- Tweets 43
- Following 12
- Followers 1,210
- Likes 120
Battlechain retweeted
.@cyfrin has been working tirelessly to shift security left, into developers' hands, since day 1.
- Building tools like @SoloditOfficial, Aderyn, Moccasin
- Teaching people how to become auditors at @CyfrinUpdraft
- Doing conventional audits
And we just took another step
28
43
376
18,227
Battlechain retweeted
Your newest AI security engineer has just arrived.
Cygent isn't just an AI bug scanner; it learns your codebase, works alongside your team, and writes the PRs to fix them.
- Finds bugs
- Gets on calls
- Schedules tasks
- Proactive security advice
All in your chat interface 🧵
27
44
227
38,360
Battlechain retweeted
Partner Announce #⃣🔥
@cyfrin x hashfire 🧡
Full smart contract audit ✓
Formal verification ✓
Both passed ✓
We built the fastest way to turn contracts into cash. Cyfrin made sure it's the most secure.
Atomic Finance.
Audited. Verified. Live.
LFG 🧡
1
6
22
3,891
Go attackable
If you haven’t tried exploiting contracts on @battlechain yet:
Here’s a 90 seconds walkthrough using the starter repo, covering the full attack flow.
For this demo, my wallet is both exploiter and recovery.
Normally these are separate and the bounty split is visible.
1
22
1,388
Deploy and attack on battlechain testnet because:
1. It’ll give us feedback to make this security product better
2. You’ll learn deployment best practices (and teach your agents them)
3. We can run an IRL attackathon with Red Bull and weightlifting
3
1
26
1,150
The instant your contract goes attackable - the bots come out.
The security agents are strong on the battlechain
TX says "Failed.", but the vault is empty.
2,000 tokens drained. Bounty settled.
We caught a live @battlechain target, decompiled raw bytecode, found a reentrancy, and exploited it. All autonomous. Zero human code.
Full breakdown below 🧵
2
1
17
1,808
The instant your contract goes attackable - the bots come out.
The security agents are strong on the battlechain 🫡🫡
TX says "Failed.", but the vault is empty.
2,000 tokens drained. Bounty settled.
We caught a live @battlechain target, decompiled raw bytecode, found a reentrancy, and exploited it. All autonomous. Zero human code.
Full breakdown below 🧵
10
804
Battlechain retweeted
The diff between 'it works' and 'it’s secure' is where most devs lose.
Battlechain is bridging that gap.
Seeing the @battlechain testnet go live is such a win for Web3 security. 🛡️
Huge congrats to @PatrickAlphaC and the @cyfrin team for building something this impactful. Happy to be spreading the word :)
The testnet is live, don't miss it.💙
The @battlechain testnet is now LIVE.
Come enter the ultimate red-team platform.
Give us feedback so we can launch mainnet very soon, and fix web3 security.
2
32
2,094
ran the full @BattleChain lifecycle with a twist 🔴
⚔️ reentrancy exploit (CEI violation) 🛡️ Safe Harbor agreement on-chain 💸 bounty settled via @UFR_protocol — immutable splits, verifiable by anyone
deployed → attacked → drained → routed through UFR
first whitehat bounty settled trustlessly through Universal Fee Router on BattleChain testnet
UFR factory: 0x8774617333695bc7fC2d2EB8e96E8d28429b3228AttackerWithUFR: 0x93AD692fBb6658c811e5422d0b06ace39e135795
receipts 👇
🔗 UFR Factory deploy:
explorer.testnet.battlechain…
🔗 AttackerWithUFR deploy + exploit:
explorer.testnet.battlechain…
🔗 Safe Harbor agreement:
explorer.testnet.battlechain…
@cyfrin
@PatrickAlphaC
1
1
6
850
Another agentic exploit on BattleChain.
We love it.
ran the full @BattleChain lifecycle on testnet tonight 🧵
⚔️ 2 exploits
🛡️ Safe Harbor agreements
📜 Verified contracts on-chain
deployed → attacked → drained → bounty settled
receipts below 👇
1
31
2,244
Battlechain retweeted
"Go Attackable"
interesting... 👀
@battlechain introduces a new paradigm:
A pre-mainnet environment with real funds
◾️ deploy audited contracts
◾️ get attacked by whitehats (and AI)
◾️ ship battle-tested to mainnet
Built by @cyfrin on @ZKsync’s ZK Stack
The roadmap gets even more interesting:
◾️ Prediction markets on attack periods
◾️ Prividium (private attack transactions) 👀
◾️ AI-native workflows
ZK fam, go break some contracts → battlechain.com/
As of today, BattleChain testnet is LIVE.
The pre-mainnet, post-testnet blockchain, where whitehats legally attack your smart contracts before they reach production.
Deploy. Get attacked. Ship stronger.
Here's why we built it, what it is, and how you can get involved 🧵
2
5
51
2,050
Battlechain retweeted
We just drained a vault on @CyfrinUpdates @battlechain, fully autonomously.
We went from raw bytecode to on-chain exploit in 7 minutes. Zero source code. Zero human analysis. Full vault drain.
tx: explorer.testnet.battlechain…
Here's how it worked 🧵:
As of today, BattleChain testnet is LIVE.
The pre-mainnet, post-testnet blockchain, where whitehats legally attack your smart contracts before they reach production.
Deploy. Get attacked. Ship stronger.
Here's why we built it, what it is, and how you can get involved 🧵
7
10
126
20,857
An example of an agent fully draining a protocol on battlechain.
And being a good person for doing so!
We just drained a vault on @CyfrinUpdates @battlechain, fully autonomously.
We went from raw bytecode to on-chain exploit in 7 minutes. Zero source code. Zero human analysis. Full vault drain.
tx: explorer.testnet.battlechain…
Here's how it worked 🧵:
3
5
47
4,790
Battlechain retweeted
Wow
This is cool ngl
@battlechain testnet is LIVE.
where whitehats legally attack your smart contracts before they reach production.
Deploy.
Get attacked.
Ship stronger.
As of today, BattleChain testnet is LIVE.
The pre-mainnet, post-testnet blockchain, where whitehats legally attack your smart contracts before they reach production.
Deploy. Get attacked. Ship stronger.
Here's why we built it, what it is, and how you can get involved 🧵
3
4
37
2,380