🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

Day 33 of 1001 – Building my Cantina 🪐 portfolio in public. Read a couple of Spearbit reports today for inspiration.

Day 34 of 1001 – Building my Cantina 🪐 portfolio in public While planning out the new week, I realized I got caught up in a bit of FOMO with all the new contests popping up. My original plan was to focus purely on Jigsaw, but instead, I ended up bouncing around between Jigsaw,

Day 35 of 1001 – Building my Cantina 🪐 portfolio in public Started the Jigsaw contest today. Focused on one contract and tested a few ideas Explored Solodit 🟪 to find similar projects

Day 36 of 1001 – Building my Cantina 🪐 portfolio in public The last couple of days I've been gathering additional evidence for one of my audit reports, hoping the judge might reconsider and upgrade it from "Rejected" to a solo Medium In the end, it got bumped back up to a Low

Day 37 of 1001 – Building my Cantina 🪐 portfolio in public Kept going with the Jigsaw contest today and checked out some findings from the Mighty contests. Spent extra time reviewing the rejected ones - you really learn a lot from the judges’ comments!

Day 38 of 1001 – Building my Cantina 🪐 portfolio in public Spent about 4 hours today on a PoC to prove an edge case. The biggest challenge was figuring out exactly when the bug triggers. Also got the prelim results from my very first contest (RAAC) — 14H/M issues found, only

~ Never judge a codebase by its bounty size ~ Tim's thought is brilliant and makes total sense. However, our experience doing web3 bug bounties as a full-time job for three years taught us a different lesson. We used to believe that the larger the bounty, the harder it was to

Day 39 of 1001 – Building my Cantina 🪐 portfolio in public Continued with the Jigsaw contest. Got basic Certora sanity checks running, but struggled resolving calls and linking contracts without exploding runtime. Planning to improve my setup over the weekend.

A security career doesn’t begin with a job offer. It begins with consistency and the decision to keep showing up - even when no one’s watching. Many have created successful careers from scratch. That’s what the Cantina Fellowship is built for. Let’s explore how it works.

Day 40 of 1001 – Building my Cantina 🪐 portfolio in public Congrats to everyone who got accepted! Unfortunately, I didn't make it this time, but that just gives me more time to climb the Cantina ranks. I'll try again next time!

Rule of thumb for smart contract security auditors: If you struggle to find Low/Medium issues, don’t rush to spot Highs/Crits. Build your foundation with smaller findings first - the big bugs will come with experience. Crawl -> walk -> run.

Day 42 of 1001 – Building my Cantina 🪐 portfolio in public Today was all about reading reports and trying to apply them to the jigsaw contest

Day 44 of 1001 – Building my Cantina 🪐 portfolio in public Today 2 of my findings in the Jigsaw contest got rejected - I accidentally submitted them from an out-of-scope contract😮‍💨 - Lesson learned!