Security Researcher Ex-Senior Blockchain Engineer DM for private security reviews

Joined July 2023
Last month we saw the creation of the new token standard — ERC404! Now, there are already a couple of tens of ERC404s with a 300M+ market cap, which can be easily applied in RWAs, Gaming, NFT liquidity providing, etc.👇
2
6
23
1,976
Year 2023: - $10,000 earned 📈 - 12 audits completed 📃 - 1000+ tutorials watched / read 💻
2
124
Do you know what SHA3 opcode is equivalent to?
124
The biggest liquidation to date had ~$330K USD profit, back in 2019. 🤯
88
Invoke the Pausable._pause and Pausable._unpause internal functions, with appropriate access control, e.g. using AccessControl or Ownable. Not doing so will make the contract pause mechanism of the contract unreachable, and thus unusable. 🚩
3
397
"Reputable company", but the report is a bit shitty I think, all findings are super overrated and poorly described. Can't really understand how the biggest protocols have paid a ton for this report. 🤔 github.com/abdk-consulting/a…
75
Ultimate repository with reproduced DeFi exploits 🔥 github.com/SunWeb3Sec/DeFiHa…
43
Well said, I would add try to simulated scenarios and user flows 💡
Understanding a complex protocol requires an approach that goes beyond just reading documentation. To gain a comprehensive grasp of the underlying idea, consider the following: - Thorough Documentation Review - Unit Test Analysis - Internal Technical Specifications - Flowcharts
2
137
Did you know that the keccak256 of an empty string is 0xc5d2460186f7233c927e7db2dcc703c0e500b653ca82273b7bfad8045d85a470? 🧐
1
1
7
522
What if the protocol that you audited gets hacked? 🧨 I'm thinking about how would I proceed in such a situation and can't think of a proper scenario.
2
267
AI tools designed specifically for smart contract auditors 🫡 medium.com/@unsnarl_secure/t…
113
While carefully reading past reports, I often see how two totally different reports of the same vulnerability are paid equally. The better one in most cases includes a detailed PoC.
1
94
Interested to see a behind-the-scenes on a full private solo smart contract audit? From initial contact to final report delivery, including code cleanup, security assessment and more 🤓🧵
2
4
47
2,667
Remeber luck is when the great preparation meets an opportunity or whatever.
1
109
Flexing with <$1 payouts from contests is strange
7
1
19
2,079
Nice channel for web3 devs 👇 My favourite videos are Gelato Relay API related ones youtube.com/@SarahBensonCode…
133
Smart contract security audit costs between $50 and $120k a week! What makes such a difference?
6
20
2,143
7 new reports read today ✅
1
148