Independent Security Researcher 🕵🏻 Passionate about Auditing and Enhancing Smart Contracts 💡
Joined July 2023
- Tweets315
- Following222
- Followers35
- Likes334
Pinned Tweet
Taking that leap of faith to Web3 Security. 🚀 Scary? Sure. Worth it? Absolutely!
Can't wait to share that I've finally done it.
I remember when I was working at my 8 hour job and I dreamed of becoming an Independent Smart Contract Auditor, yes I was afraid to take that risk...
But, in the end, I did, I quit my job and why?
- To focus 100% in Web3 Security and give my best!
Was It Worth It?
- Haha that was the Best Decision I ever made in my Life!
Follow your dream, you've got to follow it!
3
488
Victorb32 retweeted
Tutorial hell is a real trap and you can easily get stuck in it for every new skill you are trying to learn.
Reading about a skill is not doing it.
Talking about a skill is not doing it.
Thinking about a skill is not doing it.
The only way to get better is to practice.
Victorb32 retweeted
You must read this.
Simple question.
> What happens if call is made to address(0)?
Ended up with $250K bounty.
Tiny change in a safeLibrary allows to call safeTransferFrom on non-existing ERC20
Recording infinite amount as balance
forum.balancer.fi/t/balancer…
I realized this early on and, starting last month, I have been focusing more on learning instead of growing my follower count.
I will be more active on Twitter once I have results to show.
How to build a presence as an auditor?
1. Deliver results
2. Talk about it
Granted, you can do 2) without 1) but that will be a lot of talking.
1
3
869
Here's what I'm reading this weekend:
1. Ethereum Smart Contract Security Best Practices
consensys.github.io/smart-co…
2. How to Secure Your Smart Contracts - Part 1
medium.com/loom-network/how-…
3. How to Secure Your Smart Contracts - Part 2
medium.com/loom-network/how-…
4. Ethereum, Solidity and integer overflows
randomoracle.wordpress.com/2…
5. An In-Depth Look at the Parity Multisig Bug
hackingdistributed.com/2017/…
1
60
Am I the only one who doesn't like Mac?
My company gave me a MacBook, but I have never used it. It's just lying there on my desk for the past year.
53
well, this can be a good starting point 🔥
I strongly believe that Web3 is not just a technology but a gateway to limitless possibilities. I’ve chosen my mission to share my knowledge and educate people a while ago. This time, we’re aiming to bridge the knowledge gap by providing affordable access to high-quality Web3 education. We want to make sure that everyone who aspires to step into the world of Web3 security can do so without any barriers 🌐
That said, please welcome, the Smart Contract Hacking Lite 🎉 We are proud to present to you the lite version of the loved-by-many SCH course. With this upcoming comprehensive course, you’ll be opening Web3 opportunities wider than ever before. You’ll be getting a solid, structured and practical intro to Web3 security and smart contract hacking and get a taste of how it is to step into the industry.
Of course, in our best style, the Smart Contract Hacking Lite will not come without perks 👀👇
Anyone and everyone wanting to finally start their journey in Web3 Security can get an extra discount on the course! All that’s left to do is simply quote retweet/retweet this official course announcement & DM me to receive a personal discount code. Voila, there you have it ✨ Don’t miss this chance to kickstart your career 🦾 (link to the course in the comments below)
Wait, you thought that was it? Not quite 😏 In our efforts to constantly improve the materials of the full Smart Contract Hacking course, we’re also airing another exercise on Oracle Manipulation to blow your mind 🤯 Advanced, increased difficulty level, exciting - we compiled all the best features to yet again push your skills to the limit! LIVE now on the SCH course 🎥 Now that will be it🫡
1
152
Victorb32 retweeted
Exploring Security Practices Of Smart Contract Developers!
Must Be Read 🫡
Link pdf: arxiv.org/pdf/2204.11193.pdf
🔰 Quick tip! 🔰
When you spot someone sharing a gem of a resource or an audit report as a GitHub repo link here,
go ahead and star 🌟 the repo directly instead of just bookmarking the tweet. 🐦
Way easier to organize and find later with lists/folders. 🗂️
1
66
Wondering how many of you are actively involved in learning Web3 or working in this field full-time?
I have a 9-5 web2 dev job 💀
2
1
88
During exams, I used to uninstall WhatsApp to maintain my focus. However, I soon realized that my lack of discipline was the true issue, not the app or my phone.
Even though I have social media apps installed now, I rarely use them.
I understand that I can't blame a piece of code if things go wrong.
it's essential to take responsibility for my choices and habits.
3
64
Not a fan of podcasts. They easily bore me, just like Twitter Spaces and Clubhouse.
Any recommendations for an interesting podcast, especially on Web3 security, that could change my perspective?
3
5
230
Victorb32 retweeted
Amateur Web3 security researcher looking to audit protocols before public audit competitions.. 🕵️
I'm only paid if I find a vulnerability, so it's a great way to clean your protocol before the big test. 🔍DM me for more details.
#Web3Security #BugBounty #SmartContracts
#Security
🔰 Smart Contract Security 🔰
"Mastering Ethereum" 📚 itself is a treasure, and Chapter 9, "Smart Contract Security," is the icing on the cake 🍰
The section provides an insightful 💡 explanation on various risks and antipatterns, including:
• Reentrancy
• Arithmetic Over/Underflows
• Unexpected Ether
• DELEGATECALL
• Default visibilities
• Entropy illusion
• External contract referencing
• Short address/Parameter attack
• Unchecked Call return values
• Race Conditions/Front running
• Denial of service (DOS)
• Block timestamp manipulation
• Constructors with Care
• Uninitialized Storage Pointers
• Floating point and precision
• Tx.origin authentication
• Contract libraries
For each attack vector, the chapter delves into vulnerability analysis, prevention techniques, and real-world examples.
You can access it on GitHub 👇🏻
github.com/ethereumbook/ethe…
2
3
539
Tagging some Chads, If anyone has inputs regarding this matter or would like to offer suggestions.
@PatrickAlphaC @0xOwenThurm @RealJohnnyTime @0xBeirao @andyfeili @ShieldifyAnon @jeffsecurity @chrisdior777
3
79