I wanted to write a quick article about a discovery I made yesterday. This is a game changer for writing PoCs and writing better integration tests. Check the next article about writting directly on the storage slot of variables. medium.com/@stalin.macias… x.com/Stalin_eth/sta…

Found a non-critical issue in Yeet Audit at Immunefi Guild Audits

"Falling in love" is clearly a delegatecall. Your logic stays, but someone else's context takes over. You give them 63/64 of your gas and hope they don’t revert.

33 security researchers managed to find the Critical Issue on Immunefi in a codebase previously audited by an audit firm and you still get discouraged when you see "Previously audited by ..."? You, however small security researcher you are, can make the difference!

Never will it be heard that in the end I failed.

A huge thank you to the entire Guild Audits team for the opportunity and to Immunefi for sponsoring this program. Grateful to have been part of this amazing cohort 🙏 Had to step away for a while due to exams, but I’m glad I made it through! Let the bug hunt begin! 🚀🚀

Since we’re talking about Nigeria a lot… …you may be interested in knowing that ~66% the current content in 60 Days of Solana was written by Nigerian engineers. Lots of people onboarded to Solana using that resource. Kinda says something doesn’t it. (When all the days are

~ Bug bounties are overhyped. Contests and private audits are harder. After 26 web3 bounties in live protocols and 49 findings in contests, this is our take: - In bug bounties, assuming you can afford a few months of rent, you have plenty of time to discover a critical, and

talent is evenly distributed. opportunities are not. i’ve seen a lot of posts about how your location can determine your opportunities. here’s my recent experience. Blockradar was selected as one of 10 finalists to pitch at the crypto valley(Crypto Valley) conference 2025

Yup. Remember that my tweet that Nigerians love conflict to an extreme degree. It took a basic perfume argument, now threats of reporting and insults and all are flying up and down. None of them will ask themselves: what exactly am I fighting for here? What is the upside? Nope.

I'm going to live tweet some comments as I look over the new EulerSwap code. 1/n

i wonder how people that can understand this deeply see the world

For their final project, Guild Academy students conducted two free private audits, which were successfully completed. The issues have been confirmed and fixed by the protocols. Issues have been confirmed and fixed by the protocols

That feeling when you spend days auditing and find zero bugs only to see others with 10+ bugs in the same codebase? The problem? Your approach. Elite auditors don't look for what IS broken, they look for what they CAN break. 4 SOLID approaches to change your audit game👇

First private Audit 👾🫡

🏆 Another win for Cohort IV! Big shoutout to BlackAdam(🌸, 🌿)🔮 for ranking 6th in Cyfrin CodeHawks' Starknet 🐺🐱 staking audit(Part 2). The excellence continues! #GuildAcademy"

Let's break a flawed ERC4626 Vault in 5 minutes with Invariant Testing!

I will never blame auditors on missing bugs as shit happens and everyone can miss bugs. But if bugs are being missed due to the design of the platform, the audit scopes are being hidden from the public and things are handled behind closed doors, it looks really bad. It feels

Highlighting some more people that you should really be following in cybersecurity hg_real Blaklis H4x0r.DZ Deepak bug_vs_me freakyclown Gospel HackerSploit Hassan🐞 🏴‍☠️ ippsec Intigriti Jon McCoy KNOXSS Het Mehta Modern Samurai Nuclei by ProjectDiscovery