Big Ups to @PashovAuditGrp for organizing this amazing program. I definitely learnt a lot. Highlights: the audits I participated in and the people I got to work with. Amazing amazing experience 👏👏

> For the next 3 weeks, security researchers will hunt alongside leading AI auditors oh cool, researchers will have enough time to thoroughly review the codebase > Scope: 20,649 nSLOC

Always design choice, intended design, until it isn't @0xfrsmln

a solo yea passing when everyone else abstains is intended design my friend said, "a design choice that's became a design failure"

Forever grateful to AI for automating the dread of report writing and making me more confident in all programming language. Thats legit my favourite thing thus far

You're going to waste the summer. Not because you're lazy. Because summer makes losing momentum feel harmless. And by the time September shows up, "I'll lock in soon" has already cost you 3 months of your life. This summer, use it. Today, we're launching SR Summer 🏖️💻 A challenge for security researchers who want to spend this summer turning their skills into actual money. The goal is not just to tell you to "hunt harder." It's to help you get better at the parts of security research that actually affect your results. Which programs should you spend time on? How do you choose targets with a higher chance of meaningful findings? How do you structure your research process? How can AI help you move faster? How do you write reports that are easier to review, and more likely to communicate impact clearly? That is what SR Summer is about. The full breakdown is below. Don't read it in September.

The Pareto Principle hits hard in Web3 auditing: -80% of findings are found with 20% of the effort. -The final 20% of findings demand 80% of the effort. -Yet, those few, deep bugs can make up 100% of the critical prize pot. Don't settle for the low-hanging fruit. Dig deeper. ⛏️

"You’re absolutely right — that was an infinite mint. My mistake."

ready for day 1 🫡 @monad #Monad #MonadMainnet #MonadEcosystem

Auditing methods I've tested: - Top to bottom (and reverse) - Small contracts first (and reverse) - User flows - Internal first - Fast read everything and go deep - Go deep and slow - Start where you like (for the crazy ones) And from all of these tests I've came to the conclusion that it doesn't really matter. Whatever you pick it will have little to no effect on your auditing as long as you do the basics. The only exception are user flows, which are a must to do a least once on an audit xD

Here is a very simple Alfa that could 10x the earnings of any person struggling in Web3 Security Competitions: Before even auditing the code, understand the code so deeply such that you are able to implement it from scratch if needed. Resist any urge to analyze any part of the code even if you sense any potentially vulnerable code and reserve the analysis for the post understanding phase.

On the evening of November 20th, RareSkills will launch... Ultimate Security Games Live in Argentina. Smart contract hacking + esports = Ultimate Security Games The hackers will share their screens live, so you'll see their thought process and strategy as they break the contracts. If the terminal looks a little scary, no worries, @Jeyffre will explain what is happening in understandable terms. The contracts will be hosted on @monad (which-net? can't say yet!). We'd also like to thank @sigp_io and @immunefi for making the event possible. Over the next few days we'll more details about the rules, teams and more. Watch this space... Sign up in the Luma next!

I just took a leap now and submitted an application to @cantinaxyz for their Fellowship Program (Apprentice). Hopefully, I am considered. Fingers crossed 🤞

To this day, just by pure hard work and persistence, you can make it in web3 & crypto, especially in web3 security. If you are reading this, this is your chance to focus, get back on track, and do the work you know you MUST do🫡

One of the privileges of working as a security researcher is that you don't have to do interviews before you get to work with protocols. Your skills and results speak for themselves

them fajitas be sizzling

It’s all gonna be worth it in the end. Keep grinding!

I relate with this so much. I constantly have to remind myself to press further and never be satisfied.

I guess you did. I just finished the course and the new module wasnt a part of it

Nobody is good at the start. Nobody is bad after 10,000 attempts.

Apparently, I am cooked 😂. GGs @cantinaxyz @monad