I spent 10 hours writing down every weird vault bug I've found.
9 bugs in total
- 5 for building a vault
- 4 for integrating with one
Most of them sound obvious until you realize your project has them
Everything takes time
> I didn't start my first contest with a major payout. First few months were 10-100 USD payout only, most were just 0
> I didn't start finding bugs left and right
> I didn't start auditing being able to look at the screen for 2-3 hours strait (and
Foundry has recently released a new tool, and it's a lifesaver 🚀🛠️
`forge clone <address>`
This will download all the code and dependencies you need to run a live contract of your choice!
As a Security Researcher, I've made a total of 0 USD in February
Here is how I achieved this outstanding income:
1. Did big contests all month - they have a higher ROI
2. Took only 1 day off - no time to wasted, money needs to be made
3. Worked all day - my life is work, gym,
Some tips if you are a beginner (2 min read)
- There will be bugs in every codebase (anyone saying otherwise is an NPC)
- If you don't know a concept, read 1-2 articles about it or watch a YouTube video. That time is not wasted, you'll understand it better for the next time
Are you "finding" bugs, or are you "not missing them" ?
(3min read)
Last year I did a couple of experiments to help me find the skills needed to get better.
Some of those experiments focused on speed, others on patters, but this one was focused on understanding and
I wish someone had told me this back when I was starting:
❗️ Good auditors work 5x, if not 10x, harder than you
❗️ You can be either good at Twitter or good at auditing
❗️ It takes more time than you expect
❗️ Learn as much as you can from each audit
❗️ Posting proof of
One great method that can improve your learning is a feedback form 📝.
It helped me WIN my first @code4rena contest back in November 🏆
And it helped me get a chance to work with @GuardianAudits, auditing some of the biggest names in crypto 💼.
This isn't a technique to do
Here is a great article, not for auditing, but
about focus and learning faster.
"Give me six hours to chop down a tree and I will spend the first four sharpening the axe" - Lincoln