0xDimo @0xDimo
Web2 Team Leader transitioning to Web3 I tweet about my journey, goals, successes and milestones github.com/0xdimo Joined February 2023-
Tweets524
-
Followers354
-
Following172
-
Likes530
I finally managed to convince the best Web2 dev I know to give Web3 auditing a try What would be the best audit contest you’d recommend for a shadow audit to help him get started? Ideally, a simple Solidity DeFi codebase, <1000 nSLOC, with ~10-15 H/M in the final report
List of Some Attack Vectors/Smart Contract Vulnerabilities! 🗒️ - Reentrancy - Reentrancy via Modifier - Read-Only Reentrancy - Cross-Function Reentrancy - Cross-Contract Reentrancy - Front-Running - Front-Running - Unprotected withdraw - Front-Running - Sandwich attack - Front-Running - ERC20 approval - Front-Running - Signatures - Back-Running - Flash-Loan Governance Attack - Flash-Loan Price Attack - Denial Of Service (DOS) by complex fallback function - Denial Of Service (DOS) by gas limit - Denial Of Service (DOS) by non-existent address or malicious contract - Floating Point Arithmetic - ECDSA Signature malleability - ECDSA Signature replay - Replay Attack - Price Oracle Manipulation - Cross-Chain Bridge Manipulation - Initial Supply Mint Issue - Divide before multiply - Integer Underflow - DeFi Slippage attack - Amplification Attack Double Spending - Malicious Honeypot - Unsafe Delegatecalls - Loops Gas Limit - Phishing With Improper Authorization - Unexpected Ether With Forcibly Sending Ether - Block timestamp Manipulation - Unchecked return values - Insecure Randomness - Proxy Storage Collision - Strict equalities - Timestamp Dependence - Use of Deprecated Functions - Requirement Validation - Absent modifiers - Force Feeding - Rounding Down To Zero What would you add? 👇 I’d appreciate a repost, spread the knowledge! 🫡
Taking a shot at it 👀
Win $1000! At @EgisSec, we were inspired and supported by other researchers, and we want to do the same for those who are starting right now. That's why we plan to give $1000 to the winner of the following challenge. ↓
Win $1000! At @EgisSec, we were inspired and supported by other researchers, and we want to do the same for those who are starting right now. That's why we plan to give $1000 to the winner of the following challenge. ↓
Writing sleek PoCs is satisfying the developer's urge that I still have left in me 🫠
Just saw @SoloditOfficial's checklist tab. I've seen quite a few SRs developing their own version of this. How can we contribute to this one?
@p_tsanev @zachobront Amazing, even though it's a med
Had some more and some less productive days during the holidays. However, the routine is back and @renftlabs on c4 is the current target.
Here's the strategy I used for winning 99% of my solo audit opportunities: 1. Spend 2-3 hours looking for low-hanging fruits. 2. Compile a table with all the findings. 3. Provide the pre-audit to the prospect along with the quote. The result should resemble this:
That’s pure gold
Everything I've learned about auditing in 2023 - Do what everyone does, get what everyone gets. I seriously can't emphasize this enough. If you're reading and learning from the same sources as everyone else, you basically can't beat the rest. If you want to be an outstanding
When a new audit starts, it's all an equal playground again and only effort will determine the results. What a great feeling.
To all judges, would you invalidate an issue if it doesn't contain "Manual Review" under "Tools used"? Is this some kind of a CAPTCHA?
@WangAudit Would be great to not have binged all of Owen’s videos already 😅
You have 20 min. How do you get better at web3 security in that time?
@pashov The creator of this is saving the web3 space
@0xOwenThurm I thought only I was adjusting it 🫠
Percy Howell @HowellPerc8136
100 Followers 5K Following
Shaikh Minhaj @minhaj_313
10 Followers 453 Following
0xnick @0xnick_audits
0 Followers 55 Following
Nikolay Ivanov @Nikolay98910893
16 Followers 144 Following
Maglov @krasi_markov
60 Followers 276 Following Smart Contract Security Researcher | Web3 Еnthusiast
DevBay @devbay7
5 Followers 243 Following 👩💻 Frontend Developer Interested In Smart Contracts Security Researching
Tawhid @Only_Tawhid
2 Followers 339 Following
Hajiahmad Ahmadzada @haj14hmad
0 Followers 101 Following
Martian @martianxpod
455 Followers 6K Following I believe in a decentralized future, and sovereignty of personal data.
0xmusashi @0xkraken42
15 Followers 654 Following
pak store @pakstore1794
3 Followers 126 Following
volifoet @kokoteofilov
5 Followers 169 Following 💻 Software Engineer | 🔪 Currently all in on smart contract security
ŠB Măżhãŕúĺ @sbkhan9217
201 Followers 219 Following Left to Phaver #byebyebirdie Crypto Trader And Holder 💵💰
priyanka @syuko200008
11 Followers 211 Following
MAZHARUL ISLAM @sbmazharul5147
210 Followers 896 Following Exchanger Promoter, Crypto Trader, Kyc Buyer & Seller 💸💸
Shashank Vishwakarma ... @shashankss1908
3 Followers 301 Following
Enzo @enzo150324
22 Followers 176 Following
Ethan__14 @abadir__14
31 Followers 214 Following
bayne @bayne1992
25 Followers 252 Following
larissa @opaquehoran
33 Followers 287 Following
torio @darea_hawleri
22 Followers 220 Following
Ettie Brenna @BrennaEtti
6 Followers 236 Following
aulis Yu @AulisY60673
26 Followers 187 Following
Joseph Dara @Jhoe0x
3K Followers 2K Following Platform Engineer || Security Engineer || 2x GCP certified. ex: Coinbase
Andrew Baji @baji_andrew
3 Followers 4K Following
Aboo_Turaab @Aboo_Turaab
213 Followers 2K Following FullStack Developer | Technical Writer I help small businesses build clean, responsive websites and practical web development training.
013 @Paxshell
4 Followers 378 Following
Moris @Moris455812
120 Followers 6K Following
TechArch420 @TechArch420
188 Followers 6K Following
Luciano Lupo @lupo0x
172 Followers 965 Following Software Engineer (web3, AI) | Ex @mercadolibre | Building at @buidlerstech From 🇦🇷 fueled by 🧉
placeholder @placeholder_old
6K Followers 746 Following
yvuchev @YordanVuchev
607 Followers 613 Following Blockchain Developer | Ex Core Dev Team @LootLiquid | Tg: https://t.co/5DQElTNqjh
sherblock @0x_sherblock
9 Followers 144 Following 🚀 | Web3 Security Learner Inspired by Pashov and his Community 📚 Currently levelling up in web3 security with Updraft Cyfrin under the guidance of Patrick.
iiii @iiii670364
3 Followers 258 Following
Haseeb Qureshi ＞|�... @hosseeb
150K Followers 1K Following Managing partner @dragonfly. Let's think step by step.
Mudit Gupta @Mudit__Gupta
68K Followers 1K Following CTO @0xPolygon Labs | Blockchain Security Researcher | Ethereum & Web3 dev 🦇🔊
Donald J. Trump @realDonaldTrump
111.9M Followers 53 Following 45th & 47th President of the United States of America🇺🇸
Jocko Willink @jockowillink
977K Followers 228 Following
bogo @xb0g0
3K Followers 540 Following Lead Security Researcher @CertoraInc | @ArtOfAuditing | Prev - #14 @cantinaxyz All-time Leaderboard & Multiple TOP1/TOP5/TOP10 finishes
Egis Security @EgisSec
1K Followers 3 Following Everyone claims they're elite. We back it up Get secured https://t.co/XjjwUNFl5s Contact https://t.co/ZayFNyJUud for more
Shieldify Security @ShieldifySec
5K Followers 267 Following Web3/Web2 Security Company. Trusted by Multipli, Colb, Pear, Onchain Heroes, Etherspot, Ambire and more. Book an audit https://t.co/MF3gAkZNw6
Pashov Audit Group @PashovAuditGrp
8K Followers 1 Following Compiling the most fitting teams of senior security researchers + AI to find the Critical vulnerabilities in your code. Protecting billions in volume & TVL.
Flint @0xFlint_
5K Followers 365 Following Blockchain & agentic finance security. Ex-Certora. Audits, technical research & speaking. Founder, Flint Security. DM for reviews.
CantinaBouncer @CantinaBouncer
670 Followers 1 Following
0xladboy | Sparkware @Xc1008Cui
3K Followers 1K Following @code4rena @sherlock blockchain security researcher DM for audit via twitter
Cyfrin Updraft 🟩 @CyfrinUpdraft
25K Followers 5 Following Teaching the next generation of web3 developers. 150+ hours of Smart Contract Development and Security Courses, completely for Free. Powered by @cyfrin
SandNallani @SandNallani
252 Followers 659 Following AI/ML Enthusiast; Applications Engineer, High Speed SerDes IP.
ABA @abarbatei
2K Followers 3K Following Founder & Principal Security Researcher @cybasecurity | EVM & @Stacks | Secured $1B+ TVL | 1000+ findings across 50+ audits
silvana @SpbWeb3
10 Followers 75 Following
solthodox.eth @solthodox
949 Followers 1K Following Blockchain dev | Security researcher | Content writer | Secondary account: @0xsolthodox
DeGatchi @DeGatchi
15K Followers 1K Following mutagenesis ∩ firmware ∩ combinatorics | burnt out podcast @ScrapingBits (math, ai, infosec, hft, crypto)
tincho 🪷 @tinchoabbate
13K Followers 156 Following ethereum security @theredguild - creator of https://t.co/yxPFXuP6gt
vectorized.eth @optimizoor
34K Followers 10K Following ✯ https://t.co/1tzvfSxd7S ⊛ @asterixlabs ⟠ NEET
StErMi @StErMi
5K Followers 1K Following #web3 dev + auditor | @SpearbitDAO LSR, @immunefi bug hunter, sage of AAVE codebase :D
Slavcheww @Slavcheww
2K Followers 437 Following
Scraping Bits Podcast @ScrapingBits
2K Followers 2 Following Talking about everything mathematics, AI, crypto and science related! Created by @DeGatchi.
nmirchev8 @nmirchev8
2K Followers 556 Following Senior Security Researcher @Certora | Co-founded @EgisSec - LSW, Top 8 in Sherlock
Stan Trenev @sstrenev
2K Followers 293 Following building @defied_money | self-custodial account for stablecoins & onchain finance
Pappa Pug @PappaPug
1K Followers 1K Following Security Researcher, Advocate & DeFi Investigator Ex @immunefi
MackenzieM 🛠️ @0xMackenzieM
4K Followers 2K Following Security Coord @immunefi, Building security infra for the Deca-Trillion coming onchain, Paying hackers for doing good, DM me
EVDoc @AboutikaR
395 Followers 845 Following Security Researcher 🛡️ | Co-founder @midgarxyz DM for audits Portfolio: https://t.co/dzUzJ8Q7RK
Pol Gallardo @PolGallardo_
147 Followers 129 Following Blockchain Developer & Security Researcher | Solidity 👨🏽💻 | Medium https://t.co/qHtzBPCmW1 | Personal Page https://t.co/z18XQgvdXz
Kenny @mostlykenny
951 Followers 1K Following Still supported | @spacexAI Ambassador 🇹🇭 I break contracts and play with AI dev tools
0xkato @0xkato
3K Followers 468 Following Working on something new in AI. Writing about models, research and security. prev blockchain security & vulnerability researcher
Daniel | Guardian Aud... @dannygfromnyc
2K Followers 268 Following Co-founder & Smart Contract Auditor 📄 @guardianaudits
EchoSpr|Security Rese... @EchoSpr
909 Followers 2K Following Smart Contract Security Researcher| 🦅on @codehawks| Securing Web3|Security Previous Intern @sigp_io
Marco De Vries @paladin_marco
5K Followers 1K Following Ex auditing Team Lead and co-founder @0xPaladinSec
Guardian @GuardianAudits
5K Followers 174 Following Institutional Grade Onchain Security, for when it has to be right the first time. Guarded $45 Billion. Book an audit → https://t.co/iGORlXEvTs
You might like
