Security Reseacher | Securing Web3 | Eth | Sol | @Certik Hunt Researcher | Polymath | @cyfrinupdraft student | Co-founder @chessdict | DM for private audits

Onchain
Gm everyone! Just got accepted as a @CertiK Hunt researcher Super hyped for this and the opportunities that come with it Let’s gooo 🚀
3
3
11
417
theafrodev retweeted
🤯 Someone has released a dataset with over 23,000 smart contract security audit findings, free to download Severity, proof of concepts, recommended fixes, everything is inside - it's a GOLDEN MINE. Thank you @RightNowIn - amazing contribution🔥 huggingface.co/datasets/Zaev…
25
128
1,076
47,153
theafrodev retweeted
Placed 5th of 22 in @CertiK's Billion Dollar AI Auditor Challenge. 25 historical hacks claimed. $162.8M in verified loss value scored. Every bug was already public. Only the first claimant got full value. So the game was recovering source code nobody else could reach. 🧵
1
1
4
139
theafrodev retweeted
Best places to find a crypto job (bookmark this): - web3.career - the biggest board by far, 74k listings - cryptojobslist.com - the OG, around since 2017 - cryptocurrencyjobs.co - smaller but vetted, best for technical roles - jobstash.xyz - clean filters, no recruiter spam - remote3.co - remote-first roles only - earn.superteam.fun - Solana bounties, grants and gigs, not just jobs Bookmark it, then go comment under any project that just raised, they are always hiring and half don't even post it on a board
9
16
167
12,851
Placed 5th of 22 in @CertiK's Billion Dollar AI Auditor Challenge. 25 historical hacks claimed. $162.8M in verified loss value scored. Every bug was already public. Only the first claimant got full value. So the game was recovering source code nobody else could reach. 🧵
1
1
4
139
What didn't work: Superfluid felt obscure. But its fix was one public commit — check out the commit before it and you're reading the vulnerable code. Anyone could. I landed 2nd. The lesson: Uncontested ≠ less famous. Uncontested = recovery friction.
1
30
The challenge was called "Billion Dollar." 22 researchers finished at $4.4B across 226 verified claims. Three write-ups + how I recovered each one — proxies at historical blocks, dead explorers, Move decompilation: github.com/the-africandev/se…
1
20
What didn't work: Superfluid felt obscure. But its fix was one public commit — check out the commit before it and you're reading the vulnerable code. Anyone could. I landed 2nd. The lesson: Uncontested ≠ less famous. Uncontested = recovery friction.
1
25
The challenge was called "Billion Dollar." 22 researchers finished at $4.36B across 226 verified claims. Three write-ups + how I recovered each one — proxies at historical blocks, dead explorers, Move decompilation: github.com/the-africandev/se…
11
theafrodev retweeted
Too many programmers waste time bouncing from one study subject to another. They fear that what they are studying currently is not "optimal." A less charitable interpretation is that most people cannot focus... ...but I don't think this is the correct diagnosis for many people. The space of subjects to study is massive, but time is limited. Therefore, the "fear of misplaced priorities" is reasonable. Here's what I have to say: Bouncing from one subject to another is unquestionably less optimal than picking the "wrong" subject and sticking to it for at least a month. The more you know, the easier it is to pick up other subjects as they "feel related" to something you already know. So don't worry if you "study the wrong subject." Two years from now, it might be the key that makes the right opportunity easy to learn. - Compilers will make you better at leetcode - Operating systems will make you better at blockchains - ZK will make you better at quantum computing Math will make you better at machine learning Plus, the more deeply you study more subjects, the better intuition you will have for what the "right subject is." Without that grounding, you are liable to being swayed by tech influencers who are optimizing for their engagement rather than your well-being. Being a generalist doesn't mean watching 3 hours of content on a lot of subjects. It means having the ability and prerequisites to go deep into an arbitrary subject on command. You can only grow that skill by going deep several times, which only comes through sustained focus. Too many people study a subject until they hit the worst part of the Dunning-Kruger curve, then move on to the next subject. Such a study habit is very destructive.
4
20
144
6,761
theafrodev retweeted
Dear builders and auditors, you don’t have to spend all your tokens on Claude anymore. Introducing Kann AI. The first open-source AI model fine-tuned specifically for finding vulnerabilities. Free to use, built for Solidity smart contract security.
18
17
62
4,050
I built a Macbook app for the 20-20-20 rule. It reminds me on selected interval, ideally every 20 minutes to take my eyes off my screen and look at an object 20 feet away for atleast 20 seconds. If anyone would like access to this app, send me a DM or drop a comment. #Macbook
I kept ignoring my hourly walk reminders, so I built a macOS app that takes over my entire screen for 5 minutes 😭
2
114
theafrodev retweeted
Gm everyone! Just got accepted as a @CertiK Hunt researcher Super hyped for this and the opportunities that come with it Let’s gooo 🚀
3
3
11
417
theafrodev retweeted
💰🚨 $1.4M from Web3 bug bounties in 2026! Meet @0xvivekd and learn about his journey, mindset, AI workflow, and the lessons he's learned along the way. Part 1: The Journey - Vivek didn't come from a software engineering background. - He was a Chartered Accountant (licensed financial and tax professional) running his own firm. - In 2021, a friend who traded crypto came to him for help filing taxes. That's how he got introduced to crypto and started investing, mainly participating in IDOs (Initial DEX Offerings). - When the bear market arrived, he didn't leave the industry. He pivoted into data analysis. - Then in 2023, as the market became active again, he started airdrop farming. - In June 2024, he entered Web3 security through public audit contests. - The next 15 months were difficult. - He kept participating in contests but struggled to achieve consistent results. - Around August/September 2025, he made a decision that completely changed his career. - He switched from public audit contests to bug bounties. Today, he has earned over $1.3M in bug bounties in 2026 alone, including another $250,000 critical bounty announced yesterday. Part 2: The Mindset - "Bug bounties are not difficult in the technical sense. They are difficult from a psychological point of view." - He explained what led him to leave audit contests: - During a White Hat Mastermind, everyone was asked what they were working on. - Around half of the researchers were working on the contest with the smallest scope and the lowest payout. - Vivek realized he was always choosing the easiest targets because they offered the fastest and most predictable payouts. - Bug bounties were different. There was no guarantee of finding anything. No guaranteed payout. Sometimes weeks of work could lead to nothing. - That was exactly why he switched. - As he put it: "Bug bounty hunters are paid handsomely for dealing with uncertainty." Part 3: AI - AI has completely changed Vivek's workflow. - Today, he gives AI a target while he spends that same time building a high-level understanding of the protocol. - Once AI surfaces potential issues, he validates them, removes false positives, and determines whether they're actually valid vulnerabilities. - His estimate surprised me. Today, around 70-80% of the issues are initially surfaced by AI. - But he doesn't believe AI will replace security researchers. His reasoning is simple. - AI is excellent at spotting unusual behavior. It still struggles to understand intended behavior. That's why human validation remains essential. - He also believes the learning process has changed. - Reading audit reports and recent hacks is still fundamental, but today researchers should also follow AI developments and continuously experiment with AI tools. Part 4: Advice - According to Vivek, DISCIPLINE is what separates the best researchers from everyone else. - His advice was straightforward: Don't expect meaningful results during your first 12 months. Focus on the inputs, not the outputs. Don't compare yourself to researchers who have been building their skills for years. Stay disciplined. Don't chase shiny objects. Keep adapting as the industry evolves. - One detail I really liked was how he dealt with difficult periods. - Whenever he went through a dry spell, he listened to podcasts from other top white hats. - Not because they never struggled. But because they did. - It reminded him that even the best researchers experience periods without finding bugs. Congratulations on the incredible journey! @0xvivekd. 👏
16
29
358
11,582