Flawless description of my approach to web3 security. Yes, I'm not a math/IT Phd. Yes, I'm still average after a 1000h+ invested. Yes, I see talented people crushing it after a few months. Yes, I don't have the energy of a 20y old. Yes, I feel dumb every contest. Yes, I am

I like figuring thing out on my own

Everyone says finding your first bug is easy... But the reality is, it's not for a beginner 🥲 If you feel stuck still trying to find your first valid vulnerability... This thread will help you! 🧵👇

I spend my free time doing contests very little time, I really wish I had more time to spend on code bases.

The only 2 things you need to progress as a web3 auditor: 1. Read code 2. Read findings EVERY. SINGLE. DAY. There are no shortcuts, routines, techniques, etc, that can beat those two.

#WorldPasswordDay I have a list of 14 million+ passwords, tell me yours and I'll confirm if it's part of the list 🙂

Anytime I'm about to start an audit I always remember Zellic "Auditors Grindset" blog post "Also, very important note–if you ever feel dumb learning Solidity: You are not dumb. It is Solidity that is dumb. ".

Building Smart Contracts is an endless survival game. lvl 1: compiler lvl 2: chat GPT lvl 3: you lvl 4: tests lvl 5: auditors lvl 6: hackers <-- final boss You can never be sure that you won Level 6.

Chance to grind and learn, going to make the most of it.

“I shoulda been a dev..😔”

The ₿adger 🦡 standouts are in! Check out the results. 🪐 Your top 3 ranked researchers are: 🥇 Abdullahi & Yas000X: $3,545.81 🥈 @__mrkaplan& tonips: $3,371.70 🥉 Stormreckson⛈️: $3,341.99 Thank you to everyone that participated! Full leaderboard below.

Now is about as good as anytime.

Something I'm proud of today is helping security researchers recognize their true value. Before Spearbit and Cantina 🪐, you’d be shocked at how little they earned. Often, less than 5% of what customers paid for the review!

Cetus AMM on the Sui has suffered a catastrophic ~$200M hack🚨 Root cause: an arithmetic overflow in the liquidity calculation that allowed an attacker to withdraw astronomical amounts of tokens from a small liquidity position. How did they pull this off? 🧵

POV: web3 security researchers in 8AM, minutes before their 14hrs daily grind session starts

💰💰

A landmark moment for @Ethereum security. 🪐 The $2,000,000 Pectra competition, run in collaboration with Ethereum.orgfndn, has officially concluded. Your top-ranked researchers: 🥇 Alex Filippov - $342,159.94 🥈 Zigtur - $287,159.95 🥉 NDKoo - $203,733.19 Details follow.

So Spectra ran an audit competition on Immunefi and simply decided to not pay up. This is nuts discord.com/channels/78709…

LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS!

Locked for the rest of the year. Got to focus!