0xSimao (@0xSimao) / X

0xSimao

2,025 posts

0xSimao

@0xSimao

Founding Researcher @blackthornxyz | #2 @sherlockdefi 2025 | 30 Top-3 & 70+ Private Audits | Founder The Contest Academy | DM for audits t.me/OxSimao

0xsimao.com

Joined September 2022

Pinned
0xSimao
@0xSimao
Dec 1, 2025
1/ Introducing The Mentorship Series 0xsimao.com/blog/introduci… I’m personally mentoring a small, hand-picked group of auditors in 2026. 1st announced tmr. 3 months of 1-on-1 mentoring with me each. Targets: 0 → 4 figures 4 → 5 figures Step 1: Like and repost this post.
64K
0xSimao
@0xSimao
Jun 15, 2024
The results of roughly 30 full days of work (averaging 12+ hours / day) on auditing contests since January: @code4rena 34,500 USD @cantinaxyz 29,000 USD @sherlockdefi 21,000 USD 5 top3 placements out of 7 audits. Hard work really pays off.
24K
0xSimao
@0xSimao
Aug 23, 2025
Thrilled to announce my 1st place result in the @symbioticfi contest on @sherlockdefi! Very pleased with the performance, especially for finding the high zk bug that allowed proofs to be forged and submit any arbitrary data to the network. Gj everyone 🎉
11K
0xSimao
@0xSimao
Mar 31, 2025
1st place in the @YieldoorFi contest on @sherlockdefi! 🎉🎉🎉 601 participants 750 issues 🎉🎉🎉
13K
0xSimao
@0xSimao
Apr 8, 2025
1/ Bookmark this. One of the most important lessons in security research: Spotting the root cause is not enough. You must also understand the intent and impact. Let me walk you through a TWAP bug example that could’ve been easily misunderstood. 🧵
12K
0xSimao
@0xSimao
Dec 2, 2024
1/ 🧵 As promised, sharing a great way of finding vulnerabilities, especially if the contest has a short duration and integrates with other big protocols. 👇
18K
0xSimao
@0xSimao
Jan 31, 2025
Secured 1st place in the @autonomint audit on @sherlockdefi 🥳🥳 9 solo H, 5 solo M, 38 issues total. Glad to help secure the space and gj to all participants!
10K
0xSimao
@0xSimao
Apr 2, 2025
1st place in the @crestalnetwork audit on @sherlockdefi 🎉
6.4K
0xSimao
@0xSimao
Feb 12, 2025
1/ Once upon time I was just a university student with zero coding experience. No background in Web3 security. No idea how smart contracts worked. But I knew one thing—I wanted to break into Web3. Today? I am on the path to $1M in security findings. Here’s how it happened. 🧵👇
15K
0xSimao
@0xSimao
Nov 30, 2024
ate and left no crumbs 💪 > 100% coverage > 3 solo meds > 1 solo high 🥳🥳🥳
7K
0xSimao
@0xSimao
Dec 20, 2024
Sharing my @sherlockdefi 2024 stats. > Over 100 Med/High issues > $25k largest payout > $172k total earnings Proud to break into the Top 5 Leaderboard, a milestone achieved by very few! audits.sherlock.xyz/leaderboards Grateful for the journey and ready for more in 2025 🚀
5.5K
0xSimao
@0xSimao
Apr 10, 2025
1/ Not making $$ yet? Don’t get discouraged. Every codebase you read is a chance to level up: – New use cases – New design patterns – Sharpened auditing instincts The knowledge compounds. What seems “useless” now will click later when you audit something that builds on it.
7.1K
0xSimao
@0xSimao
Jul 2, 2024
Achieved 1st place in the @PoolTogether_ audit on @sherlockdefi. Found a very tricky solo high, combining rounding and circular buffer overwriting. Had a great time, the codebase is really fun and full of interesting features.
SHERLOCK
@sherlockdefi
Jul 2, 2024
🏆 @PoolTogether_ Audit Contest Results 🏆 Congrats to: 1. @0xSimao - $22,364.02🥇 2. @10xhash - $9,686.82🥈 3. @milotruck - $7,207.73🥉 @10xhash made $37,500.00 fixed pay + $9,686.82 from the contest pot! $115,000.00 rewards ➡️ $8.9M+ paid out in rewards.
13K
0xSimao
@0xSimao
Feb 20, 2025
🎉 Excited to announce my personal website! 🏆 Track my personal achievements, roles, and key stats. 🔍 Explore all private and public audits I’ve performed. 🚀 Protocols can now book me directly! Check it out here:
0xsimao.com
0xSimao
Expert Security Researcher – 30 Top-3 Finishes & 70+ Private Audits.
12K