Pinned
Around a year ago I started web3sec and it changed my life. My story. I first learned about auditing and the world of web3sec in 2022 from @pashov's Bulgarian discord server. At the time I was getting ready to change jobs and I was studying NodeJS hard, preparing a- To all junior/beginner web3 security researchers. I'll give you an alternative to a 30h+ course. Watch @ProgrammerSmart's Solidity 0.8 and Hack Solidity playlists, then jump straight into Solodit. โฌ
- Stats from my first 4 months of active auditing. - 9 High severity issues found - 19 Medium severity issues found - ~10, 000$ in rewards from contests All of this with a full time dev job. I still have a lot to learn and I'm extremely grateful to everyone that has helped me.
- Got 4th place on my 4th ever contest. This was also my 1st contest on @sherlockdefi. Thank you for the opportunity. I'm just getting started. ๐ฅ
- Decided to take a look at a small BB on @immunefi, after 2 hours I got the report done for a small bug. Yesterday it got confirmed. It got downgraded to Low, but it's still my first confirmed BB.
- Can't believe I've been in web3sec for 1 year now. Your whole life can change in such a short period of time if you put your mind towards a goal.
- 3rd contest result for @EgisSec and a few stats: ๐ฐ$19,771 in winnings for April, we are waiting on a few more results. ๐ฅFirst contest win and 3rd consecutive Top 2 finish. Thank you @sherlockdefi and @useteller for the opportunity.
- May stats for @EgisSec. ๐ ๐ 2nd month of contests as a team โ7 completed contests ๐ฐ$24,333 in winnings ๐Placements: ๐ฅ๐ฅ๐ฅ๐ฅ๐ฅ ๐2 Highs, 10 Mediums found Recaps will be dropping everyday for the next week, so keep an eye out for alpha. ๐
- How I audit. - CTRL + K + 0 to collapse all functions, so I can get a quick overview of the code - First pass of the contracts, quickly go through everything, adding @audit tags to anything important - Write lots of notes, explaining complex logic, variables, etc. - After I get a
- Do you want to learn a deceptively simple vulnerability? ๐ This vulnerability yielded us (@EgisSec) 1st place in the recent @useteller contest on @sherlockdefi.๐ Let me explain. ๐ญ
- Stats for my first month of active auditing. ๐ป - Received 2,300$ rewards from 3 contests on @CodeHawks and 1 contest on @sherlockdefi . ๐ต - Uncovered 5 High and 6 Medium severity vulnerabilities. ๐ - Doubled follower count since beginning of the month. I've improved so much
