After two and half years in web3 security research field, I finally found the best firm that I want to work with.
Happy to announce that I am joinning @electisec as resident of the smart contract team!
I appreciate all the friends who supported me in my journey❤️
I am taking break from auditing code and doing a research week (May 18th - 24th). Will share my progress here.
Main topics:
- ZK: Groth16, Plonk, ZK rollup, zkEVM
- Uniswap V3
- Fuzzing and Invariant Testing
- Novel bug bounty report and hack incidents
- Rust, Substrate, Solana
I am starting a 100 days challenge, building my web3 security portfolio in public until my dream company @CertiK hires me.
📅Day 001/100, I saw CertiK team doing suidex contest on hackenproof real-time leaderboard, so I am doing it as well. Let's hunt down some bugs!🫡
Success isn't linear. Read code, understand it, research the things that caught your eyes, question each assumption and protection mechanism, and repeat, without worrying how much money you make.
Success will come to you when you are strong.
2025 goal:
- 100k income from independent auditing work
- Get into solana, cosmwasm and cairo (already know move and sway)
- 0 hour spent on meaningless things (interview prep, bad ctf, random articles)
Spent some time going over @i2huer 's paper "Demystifying Exploitable Bugs in Smart Contracts" and wrote a non-academic "writeup" version of the paper. Enjoy.
ctfnote.com/evm-auditing/r…
Only 0.4 away from winning🤣
Achievement so far:
- RACE #37 1st place
- RACE #42 2nd place
- RACE #20 2nd place
- RACE #27 3rd place
I am from @TaiChiWeb3Sec
ALERT! Our system detected a series of attacks targeting the @odosprotocol protocol on #ETH#Base, resulting in ~$50k in losses.
The root cause is arbitrary call vulnerability caused by unverified user input. We notice that the attacker exploited the precompile contract (0x4)
I received some DMs recently asking how to get started in zk, just to clarify, I don't work in zk anymore and my focus is in rust-based DeFi audits for 2025, especially sui move and solana. Happy to discuss anything related to my current focus.
