Chase
Verified account This account is verified. Learn more@chase_mew_
Building @BounceTech
4.7K Following 2.8K Followers 642 Posts
Latest posts 5
Besu, one of Ethereum's execution clients, published 3 security advisories in all the years before 2026.
Then 34 between August and October this year.
Then 34 between August and October this year.
In 1984, Ken Thompson showed a compiler could hide a backdoor that no source audit would ever find.
In 2023 Curve lost $62M to this. The Vyper source was fine but the compiled reentrancy lock wasn't.
As exploits continue to increase, we're going to have to include the final bytecode in the scope of audits.
Compiler bugs up 3.1x this year compared to last.
In 2023 Curve lost $62M to this. The Vyper source was fine but the compiled reentrancy lock wasn't.
As exploits continue to increase, we're going to have to include the final bytecode in the scope of audits.
Compiler bugs up 3.1x this year compared to last.
In the first 9 months of 2025, zero hacks targeted a blockchain itself.
In Q3 2026, 1 in 8 did.
In Q3 2026, 1 in 8 did.
Blockchain exploit increases from AI aren't just happening at the Smart Contract level. They're also increasing at compiler, chain & node level, and even more dramatically.
Looking at the numbers from just so far this year, not even annualising, we have the below increases in exploits at each layer of the stack.
The deeper you go, the faster it's increasing.
Looking at the numbers from just so far this year, not even annualising, we have the below increases in exploits at each layer of the stack.
The deeper you go, the faster it's increasing.