Code4rena
Code4rena
Motivation
For nearly four years, Code4rena has demonstrated the effectiveness of a well-harnessed security community. We created the competitive audit which has become an industry standard security practice replicated by multiple players.
Based on our experience, we see an opportunity to bring a unique presence and distinct advantage to supporting the security goals of Arbitrum.
As supporters of Arbitrum's mission to securely scale Ethereum and having participated in helping to secure Arbitrum itself through competitive audits—including [this election system](https://code4rena.com/reports/2023-08-arbitrum) and [Arbitrum BoLD](https://code4rena.com/audits/2024-05-arbitrum-bold)—we would of course be honored to continue to serve the community in new ways.
As a representative of a 10,000+ security researcher organization, Code4rena will bring the best to bear in support of keeping Arbitrum secure and safe.
Experience
In leading Code4rena, Sock has built relationships with scores of security experts and researchers across the world.
Through Code4rena joining the Arbitrum Security Council, Sock will use his community leadership position in order to activate additional expertise on demand, regardless of the nature of the security question involved.
Skills
Cybersecurity
Code4rena has had a positive impact on web3 security and the ecosystem as a whole through empowering the growth and scale of security researcher expertise, transparent publication of the largest single collection of vulnerabilities and accompanying project codebases, and helping to cultivate the emergence of the independent auditor economy.
Before building Code4rena as the first competitive audit platform, Sock led the team who created the Node Security Project—the first decentralized ecosystem-wide open and collaborative audit. Data from this effort was eventually donated to the Node Foundation after being used to bootstrap both the Node Security Platform (“nsp” — a product delivering actionable security advisory intel via cli) and subsequent nsp-copycat Snyk. nsp was eventually sold to npm and is what you get when you run `npm audit`. Sock also cofounded the security audit firm which provided the first pentests for GitHub and which served as their first external security advisors.
Projects
Code4rena serves all manner of projects, but is interested in the success and growth of the full ecosystem. We are rooting for everyone in the arena—especially those who are building the foundation of a secure and decentralized future. Code4rena is a wholly owned subsidiary of Zellic, who is also represented on the Security Council.