zaskoh

Today, I compiled my personal security audits, reviews, and contributions repository! It contains my reports from @code4rena, @sherlockdefi, my submissions from the @Quill_Academy CTF, and audit reports from others. Discover it here 👉 github.com/zaskoh/audits

The first guest speaker video from the latest yAcademy Fellowship Block is online! To start Block V, @devtooligan shares security alpha on what he wish he knew before the yAcademy fellowship block started. 🚀🚀 youtube.com/watch?v=QeNDS2…

Unique opportunity to join the SCH course FOR FREE! Huge appreciation goes to @0xzaskoh for funding this extraordinary initiative 🙏 For full info on the scholarship and the application process, follow the link in the first comment below👇 May the odds be ever in your favor!

There are days I get frustrated, down in a funk, hate everything and think life sucks. Here is what I do to get out of it 👇 1. Accept it Recognize that you’re upset, and don’t pretend you’re all good. Toxic positivity will erode you. Being upset sometimes is ok.

@PopPunkOnChain How is the winner chosen? I assume in their implementation they get a “random” number and choose it for the index in the array to select the winner?

⛽ How NOT to write a Raffle Smart Contract ⛽ This collection's new raffle contract is doing ONE small thing so incredibly wrong that it's costing their users ✨250✨ times more than it should be. Come one come all! Step right up and put on your gas mask and get ready! 1/8

A short exercise that I suggested to some new auditors to level up their audit game - Pick up a past @code4rena contest (small one) - Spend a weekend to find all bugs in it After you are done, open up the results of that contest and analyze two things:

@gjaldon Amazing, wish you all the best 🔥

I'm deeply honored to be doing my 1st private audit with Trust Security. The team is stacked with all-stars from leaderboards and are 100% legit auditors!🔥 The grind does pay off frens! Let's keep at it! 💪 🔥 🚀

@thenaubit @RealJohnnyTime quillctf.super.site/challenges

Are you an auditor or trying to be one? Me too, so in case you don’t know these, today I will share my list of CTFs to practice (if you know more, feel free to share below!). Inspired by the challenges in the @RealJohnnyTime course, I wanted to try more! 🧵👇

@gogotheauditor @0xMackenzieM @immunefi Good to see it went in the right direction! Keep up the good work 🔥

@devScrooge Dunno, it works like 1 out of 100 times. Just use ctr + go to references, this at least works most of the time 😅

@devScrooge I like the approach @pashov has in his audit template. #severity-classification" target="_blank" rel="nofollow noopener">github.com/pashov/audits/… pretty clear distinction and easy to understand

@devScrooge @chrisdior777 Sounds fair I guess 👍

It is interesting if the client would rather pay a base rate such as $1000 for example and an extra pay of $500/High, $300/Med or a firm price of $4000 for a smart contract security audit. Which one do you think is better and why?

@chrisdior777 @devScrooge Do you charge pre audit or post audit? Heard most charge pre audit, but this is not possible for a finding based audit?

@devScrooge I actually agree with you. Till now I have worked only with a flat rate payment, but will try a base pay + extra rewards for Highs and Meds next time. It will be interesting to see if the clients are going to like that.

the new ctf from @Quill_Academy quillctf.super.site/challenges/qui… is a tough one. If you want a challenge, you should give it a try 🧐

@0xMackenzieM @sayan_011 @immunefi @Kazim_walid wrong blockchain for me 😅

@sayan_011 @immunefi $8k max bounty. Plus their bug bounty only launched 5 days ago. And they haven't paid any reports yet. This would be a great project for an aspiring whitehat to test their skills on. 👀 Looking at you @sayan_011 @0xzaskoh @Kazim_walid

bruh

@gogotheauditor This is a big one 🔥

@chrisdior777 @cmichelio nice to hear it played out for you 🔥

As I have said before, one of the people who influenced me the most about smart contract security is @cmichelio. 6 months ago I asked him for an advice. I was wondering between two career paths. He gave me an advice and I took it. 6 months later my life changed completely. Thank you!🫡

@JSoufer @code4rena @sherlockdefi @Quill_Academy Thanks for the kind words, it's hardly inspired by all the other great repositories out there

@0xzaskoh @code4rena @sherlockdefi @Quill_Academy Awesome man! Thanks for the inspiration!

Today, I compiled my personal security audits, reviews, and contributions repository! It contains my reports from @code4rena, @sherlockdefi, my submissions from the @Quill_Academy CTF, and audit reports from others. Discover it here 👉 github.com/zaskoh/audits

📢Exciting news! Solodit has integrated @SpearbitDAO's public audit reports onto our platform, providing smart contract security auditors with even more valuable insights. Access past findings easily and enhance your auditing process with Solodit. #web3security

@bytes032 did you do the shift already? I'm still fighting with myself on this 🤷‍♂️

More people should give the solo auditor path a chance. It may seem daunting, but the rewards can be life-changing. - Likely worst case is you go back to work. - Likely best case is you unlock a better life. The real risk lies in never attempting at all.

@gjaldon @code4rena @sherlockdefi @Quill_Academy Yeah, I was inspired by all the good ones out there and wanted to do it a long time now. Looking forward for yours 🔥

@0xzaskoh @code4rena @sherlockdefi @Quill_Academy Nice work! Shaping up to be a great portfolio! Will be doing this too eventually.