this month I've been catching strays from the web3 community lol😂 But watch what I'm going to do for the remaining part of the year😎 We must get this bread🍞!

are you thinking what I'm thinking? 🤔👀

🔍 Want a deeper understanding of how liquid staking truly works? Shadow‑audit Mystic Finance’s liquid staking module on Cantina 🪐 🛠️ It’s filled with high‑severity & medium‑severity findings—a golden playground to sharpen your DeFi audit skills.

🧠 Heuristic 101: If Function A sets a cooldown and Function B only runs after cooldown expires, assess whether calling A again resets/extending the cooldown. That can block B indefinitely—critical when auditing time‑sensitive liquidations.

🧠 Heuristic 101: dealing with CDP protocol. P1. - Do partial liquidations worsen borrower positions? - does the isLiquidatable function gives the status of positions accurately? - does minting of debt(stable Coin) rely on querying oracle price? if so, depegs can happen 🤷‍♂️ ...

This is literally the best Web3 Security resource, I learned a lot from it.

🚨 Just bagged my first-ever finding on the Sherlock platform! 🕵️‍♂️🔍 After grinding for so long & eating L’s, I’ve finally broken the Sherlock curse 🪄💥 Feels surreal that I shall finally see my name on that leaderboard.

Wrapped up the Plume Attackathon on Immunefi Submitted 2 insights 💡 + 1 low 🐜 — now playing the waiting game 🎯 Fingers crossed they get accepted & validated 🤞⚡️ On to the next hunt 🚀

✨ Just wrapped up auditing the Malda contest on the SHERLOCK platform and reported 6 High-severity issues! 🕵️‍♂️‍🔍 Grateful for the intense journey and excited about the impact—big thanks to the Sherlock community for the opportunity! 🙏

🧠 Heuristic 101: dealing with CDP protocol. P2. - Ensure the liquidate() call uses fresh, accurate exchange-rates—not stale oracle data. - If a collateral token is blacklisted,inactive,or disabled, only block new activity—not exits,withdrawals, repayments,or liquidations.

You can now explore 3,376+ findings from Zokyo’s audits on Solodit. This is the highest number among all Web3 security firms. Here’s how to filter and make the most out of it 👇

next month finna be back to back Ws just wait and see anon.

sometimes you need to leave the codebase before the codebase leaves you.

ERC Standards & Edge Cases ( Resources) - repost & bookmark sir🫡 ♦️Weird ERC20 Implementations 🔗github.com/d-xo/weird-erc… ♦️Weird ERC721 Implementations 🔗github.com/abarbatei/weir… ♦️ERC4626 Security Checklist 🔗github.com/Solthodox/erc4… ♦️ERC4626 Rounding Issues

Hey Spearbit — if I uncover bugs in the Neutrl protocol you audited and finish in the Top 20, will you make me your intern? 🐞🔍 Ready to bring fresh curiosity and energy—let’s raise the bar together!

It's now or never guys. I've decided to challenge myself and I'm glad that SHERLOCK made this opportunity for me to audit the neutrl protocol codebase. I humbly accept this challenge Spearbit Mike Leffer 🙏🏿

this guys inspire me every day in the Kenyan 🇰🇪 and Tz 🇹🇿 community in terms of web3 security Tigerfrake 0xodus tinnohofficial & Daniel526 Proud of ya'll 💪

🚨 Calling all aspiring & alpha Web3 security researchers! If you’re from 🇰🇪 Kenya or 🇹🇿 Tanzania, you can DM me for the Discord invite link or hit up 0xodus Big things loading… don’t miss out 👀🔥

Everyone knows ERC4626 and how it works. But not everyone knows all the specs from the EIP. Here is a bug that comes from not being fully compliant with ERC4626. Just by researching stuff and diving deep you can find bugs. github.com/sherlock-audit…

🚨 The Great Lock-In Period starts TODAY 🚨 Whether you’re a 🛡️ web3 security gigachad or just a rookie taking your first swing — now’s the time to lock in and prove your skills. ⚡️ Who’s ready? 👀