Top 3 finish to start the year 💪 and more to come. Thanks Cantina 🪐

Recently joined the Bailsec team. I've had the opportunity to work with some top-class auditors, like Arnie & oot2k Huge thanks to CharlesWang 🫡 More to come 💪

Impressive write up. This made me realize just how deep attackers go in the code and the creativity of their hacks. We need to go further than that.

We overestimate the amount of work we can do in a day but underestimate the amount of progress we can achieve in a year. Study 1 report each day and at the end of the year you’re going to know 365 novel bugs. Do you need more reasons to open onebugperday.com every

I think I've found mine 😁

Catching a crypto pump and becoming rich out of luck can do more harm than good. The dopamine you receive from getting lucky and catching an insane pump on crypto makes every other form of work feel monotonous and dull. When you work hard for something day after day, even if

Second result of the year More to come 💪. Lessons learnt: - Only do contests with stable pot from now on 😂

Blu Boy No one talks about how messy it is, how chasing your dreams means failing in front of people, looking delusional, doubting yourself, starting over a million times. It’s not some effortless, cinematic montage; it’s late nights, rejections, isolation, and pushing through when no

Third contest result of the year. Biggest codebase I've audited so far 6k+ sloc Unfortunately, i didn't take 7 seconds or fall sick 😂. I spent about a week (cumulatively, from spare time in between private audits) with about 50% code coverage. More to come 🫡

The reason you don’t have the skills you need is because you’re unwilling to suck for as long as it takes to get good.

I got rejected when I offered someone a job in Web3 Yes you read that correctly. I told you the solution to getting a job in this industry: Work on the hardest project you can manage, then solve it publicly. Then companies will reach out to you — and you can reject them and

Dear friends and enemies: I have just open sourced my auditing approach (pt 1) x.com/philbugcatcher…

x.com/i/article/1971…

Common Auditor Mistakes #2 Imagine you’re auditing a novel liquidation function and you are spotting an obvious bug within the standard control-flow. The mistake that many auditors make is that they move on to another flow if they found a critical within one control-flow. But

I’ve finally figured out how to reliably get engineers from beginner/intermediate at Solidity to reading large codebases without breaking a sweat. Math is the biggest blocker. I’ll just say it — if you have no formal STEM training and you work as a smart contract engineer,

Almost half the researchers at RareSkills are from Nigeria. If you can’t find good talent there, it’s a skill issue with recruitment, not a country problem.

Me vs my goals for the year

Getting paid for a review and doing a horrible job is basically scamming 🫵

I've been using AI for smart contract audits longer than most people in this space. And the more I use it, the more confident I am that human auditors aren't going anywhere. Not because AI is bad. It's actually useful. I use it on every single audit I run. But there's a