Chain-Fox @ChainFoxAI

$CFX Staking Update. We have distributed rewards (5% of our revenue) to long-time supporters(Stakers), based on their share of credits burnt. A new CFX (on Bags) staking pool will be launching soon. The old CFX (on Pumpfun) staking is expected to end after next month. If you…

Manually verified 4 issues in 0G's dependencies, with AI’s help. Filtered out 100+ false positives reported by checkers using rule engines and AI. Some bugs are tricky — one needed tracing through 7 nested calls to uncover. @0G_labs @0G_Foundation @0G_Research @0g_CN

Update: We are manually reviewing AI outputs to refine our checker logic and improve interactions. This weekend we are validating over 100 detection results, filtering out irrelevant ones, and reporting findings to @0G_labs Yesterday alone, 17 potential issues were manually…

At the request of a supporter’s suggestion, we’ve made the following updates to the Chain-Fox. We have polished profile in Chain-Fox README to be friendlier for new users and more professional. We also restructured checkers & refreshed integrated checker info.…

We’ve uploaded the sample detection results to a publicly accessible site, now powered by 0G backend storage. Domain redirection is underway, along with other improvements. This marks the first step forward, and we’re on track to catch up with the 0G mainnet. @0G_labs…

We’re running the final test for the Chain-Fox Bug Report Server deployed on 0G network. If all goes well, the first version of our audit server will be live in 24h. @0G_labs @0G_Research @0G_Research @0g_CN

$𝟏𝟎𝐌 𝐑𝐞𝐰𝐚𝐫𝐝 𝐏𝐨𝐨𝐥 𝐟𝐨𝐫 𝟎𝐆 𝐓𝐞𝐬𝐭𝐧𝐞𝐭 𝐇𝐞𝐫𝐨𝐞𝐬 @0G_labs is committing $10 million to reward testnet users and node runners…users who participate in onchain activity and run nodes deserve the biggest share of rewards. Here’s the gist: $5M for testnet…

$0G is coming.

The “one-time audit” model is broken. Code evolves daily, and so do risks. At @ChainFoxAI , we’re building for continuous security. Because protection should move at the speed of Web3. Join our community on Discord: discord.gg/tHqQzd2Ske

The Chain-Fox Bug Report Server is almost ready for deployment on 0G! Here’s a sneak peek: 1. Detailed reports including buggy code, severity, root cause, and suggested fixes 2. Interactive and collapsible UI for effortless exploration

Web3 lost over $2B to exploits last year. Traditional audits were too slow, too shallow, and too expensive to prevent it. ChainFox changes the game with continuous, affordable protection that scales with every builder. Security without friction. Want your project secured?…

𝗦𝗼𝗹𝗮𝗻𝗮 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗧𝗶𝗽 #𝟴: 𝗣𝗗𝗔 𝗦𝗲𝗲𝗱𝘀 𝗠𝘂𝘀𝘁 𝗕𝗲 𝗦𝗮𝗳𝗲 Program Derived Addresses (PDAs) are powerful — but if you use weak or predictable seeds, attackers can pre-compute them and hijack accounts. * Do not use raw user input as a PDA seed * Always…

Chain-Fox @ChainFoxAI

2 weeks ago

𝗦𝗼𝗹𝗮𝗻𝗮 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗧𝗶𝗽 #𝟴: 𝗣𝗗𝗔 𝗦𝗲𝗲𝗱𝘀 𝗠𝘂𝘀𝘁 𝗕𝗲 𝗦𝗮𝗳𝗲 Program Derived Addresses (PDAs) are powerful — but if you use weak or predictable seeds, attackers can pre-compute them and hijack accounts. * Do not use raw user input as a PDA seed * Always… https://t.co/CXV2JdXld7

5 7 18 2K 2

Download Image

Progress in Just 2 Days: 1. Deployed 0G’s storage client locally and successfully uploaded sample reports. 2. Integrated LLMs to auto-triage potential bugs reported by checkers — filtering out FPs and generating clear, AI-driven bug explanations. Next up: public APIs +…

GM Chain-Fox Fam, We're back with 𝗦𝗼𝗹𝗮𝗻𝗮 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗧𝗶𝗽 #𝟳 ✍️Validate Signers and Writable Accounts. Never assume the accounts passed to your instruction are authorized. * Check account.is_signer where required. * Ensure only intended accounts are…

Chain-Fox @ChainFoxAI

3 weeks ago

GM Chain-Fox Fam, We're back with 𝗦𝗼𝗹𝗮𝗻𝗮 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗧𝗶𝗽 #𝟳 ✍️Validate Signers and Writable Accounts. Never assume the accounts passed to your instruction are authorized. * Check account.is_signer where required. * Ensure only intended accounts are… https://t.co/keqB4O07tt

1 9 16 1K 0

Download Image

This week we will put our 0G integration into action 1. Connect with 0G’s storage to host detection results of their major projects 2. Build a dApp on 0G to showcase the detection results 3. Work with 0G to resolve open issues 4. Actively engage with 0G to share progress and…

Integration with 0G is moving forward! Last week we: 1. Added a new checker to our Solana program analyzer 2. Completed checks on 0G’s major repos (Go + Rust) 3. Upgraded Go detection tools to cover newer projects 4. Explored 0G’s APIs to prepare for migrating audit & detection…

We’ve updated our Go detectors to newer Go version, enabling broader detection of today's Web3 projects written in Go. This update primarily targets 0G’s Go stack, but it also benefits other Web3 projects in Go. Chain-Fox is safeguarding Web3 infrastructure built with…

𝗦𝗼𝗹𝗮𝗻𝗮 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗧𝗶𝗽 #𝟲: 𝗔𝗹𝘄𝗮𝘆𝘀 𝗖𝗵𝗲𝗰𝗸 𝗔𝗰𝗰𝗼𝘂𝗻𝘁 𝗢𝘄𝗻𝗲𝗿𝘀 An account having the right address does not guarantee it belongs to the right program. Attackers can spoof accounts with the same layout but a different owner. Verify account.owner ==…

We’ve completed detection of 0g-storage-client and 0g-storage-node, with several interesting findings. Currently double-verifying and summarizing results. Next, we’ll extend coverage across the full 0G Labs stack, then publish a detection report to 0G-hosted storage. @0G_labs…

Checking both the Rust & Go repos of 0G. We’re now tweaking the 0G Storage SDK — our detection results will soon be uploaded directly to 0G. 0G delivers not only AI, but also a powerful storage system with rich docs. Integration is moving fast. Our first detection results go…