JJS @JJS_OnChain

Independent Cryptohacker medium.com/@j.j.solomon United Kingdom Joined June 2023

Tweets

1K
Followers

180
Following

408
Likes

2K

JJS @JJS_OnChain

a day ago

What a day to be had

0 0 2 114 0

Download Image

I wonder if audit firms should start auditing a protocols web3 culture. How they sign transactions, how they deal with production etc. Most hacks nowadays stem from that rather than code that needs auditing…

0 0 0 58 0

Download Gif

JJS @JJS_OnChain

a day ago

I will continue sharing my favourite lines from @RektHQ

0 0 1 132 0

Download Image

JJS @JJS_OnChain

3 days ago

Would love to connect with more Move SRs. Should I start a Telegram group or Discord channel?

1 0 4 277 0

Download Gif

Zero Cipher @zerocipher002

4 days ago

People have been asking if one can switch from EVM to Move easily. So we thought of writing a series of articles to make the shift from EVM to move easy.

VulSight @VulsightSec

4 days ago

People have been asking if one can switch from EVM to Move easily. So we thought of writing a series of articles to make the shift from EVM to move easy.

4 2 53 6K 58

0 7 96 7K 98

JJS @JJS_OnChain

3 days ago

I’m focusing extra on Move. I truly believe something good will come out of it. Luckily there are more and more competitions and BBP. Already submitted some issues today that am happy about. LFG

0 0 4 165 0

Download Gif

JJS @JJS_OnChain

3 days ago

The cool thing about auditing Move is that all the entry points are very clearly grouped and marked. At first I thought it was unnecessary but now it's hard for me to go back to Solidity lol.

0 0 0 19 0

Download Video

Black Panther @thepantherplus

4 days ago

move sui has 2 timestamp functions that can trip you up one is `clock::timestamp_ms()` → returns time in milliseconds and 2nd is `clock_utils::timestamp_seconds()` → returns time in seconds in a recent private move sui audit we found a bug where cooldown_end was set using…

5 2 37 2K 12

JJS @JJS_OnChain

4 days ago

I want to connect with more SRs, either IRL or online. If you’re into web3 security and from the UK please either DM or comment here!

0 0 0 31 0

JJS @JJS_OnChain

4 days ago

Here what AI should be actually used for: Light hacking (easy pickings) and QA. It should make sure as much as possible that the, what I call, QA bugs are taken care of. Leave us humans to use different levers to hack.

0 0 0 36 0

JJS @JJS_OnChain

4 days ago

Something that for me took a while to grasp with other ecosystems like Move, is the lack of `msg.sender`. There is something similar, but wasn't as clear to me when I started.

0 0 0 35 0

JJS @JJS_OnChain

4 days ago

To everyone (like me) hearing all this talk about AI doing well in audits and replacing us. If you actually enjoy bug hunting, this doesn't change anything. I sometimes think, what else could I do if AI would replace auditors, but I can't think of anything else I'd rather be…

0 0 0 39 0

JJS @JJS_OnChain

a week ago

I think a season must be upon us. I fell sick as well. lol I saw loads of CT saying they’re ill now. Need to get IV now I guess @DevDacian

0 0 3 251 0

JJS @JJS_OnChain

a week ago

Move Tip 💨 You’ll see many protocol only passing a reference to signer and some Object<T>, thinking that would be secure enough. However, this is not always true. The code should also verify that the object does in fact come from the signer themselves. More info can be read…

0 1 7 530 2

Smacaud @Smacaud1

a week ago

2 5 31 2K 3

Download Image

JJS @JJS_OnChain

a week ago

A reminder to not trust LLMs. I was doing some Move auditing today and it told me that references to and Object can only be accessed by certain actors. Not true in that case. The object could’ve been accessed by anyone. It is fine to use them, only if you know how to verify…

2 1 15 1K 0

JJS @JJS_OnChain

a week ago

Love my Sundays Wake up and walk then play maplestory. Do move audits/BBP Rowing machine and a little more maplestory. Good sleep

0 0 3 359 0

Patrick Collins @PatrickAlphaC

2 weeks ago

Protect this man at all costs

sudo rm -rf --no-preserve-root / @pcaversaccio

3 weeks ago

Protect this man at all costs

56 138 815 69K 326

Download Image

8 17 313 23K 64

JJS @JJS_OnChain

2 weeks ago

I have decided to take the use of LLMs out of my workflow almost completely. I have realised how dependant I have grown to be on them and this has to stop. I will only use them when I have exhausted Google search and for basic web searches using Grok.

0 0 0 40 0

Download Gif

JJS @JJS_OnChain

2 weeks ago

Something I didn’t know you can do. If you go on the block explorer and the contract is verified you can download or view, through VSCode online, the code and its dependencies. Maybe something basic but I had no idea. Usually when you audit you do you PoCs though the test…