KiteWeb3

140 posts

KiteWeb3 banner
KiteWeb3

KiteWeb3

@_Kite_Web3

🕵🏽‍♀️ CryptoWorld Explorer | 🔥 Web3 Security Researcher | 📚 Lifelong Learner. Unleashing the power of #Web3 with every keystroke. 🚀

Katılım Kasım 2022
323 Takip Edilen90 Takipçiler
Vitto Rivabella
Vitto Rivabella@VittoStack·
Creating a PRIVATE Telegram group for people to learn about AI and vibe coding. We’ll talk about what we’re building, revenue, favorite AI tools, plugins, Claude Code, new releases, marketing, content, X, etc. Comment ‘AI’ if you want to join. I'll DM you the link.
English
5.6K
197
4.4K
390.6K
0xSimao
0xSimao@0xSimao·
Was thinking of getting the winner of a contest to explain the codebase with me in a shared screen, I think it would be interesting for people who want to do it as a shadow audit afterwards, thoughts?
English
18
2
134
3.3K
KiteWeb3
KiteWeb3@_Kite_Web3·
11th place and 2 medium findings this time 🤠
KiteWeb3 tweet media
English
0
0
0
8
Arsen
Arsen@arsen_bt·
You can become successful auditor If you are ready to work hard. That's why I’m sharing my Web3 Security Book: • Where to focus. • How to learn right way. • How to earn and progress. Follow & comment “Security” and I’ll DM it to you for free!
Arsen tweet media
English
1.3K
82
1.5K
149.7K
KiteWeb3
KiteWeb3@_Kite_Web3·
@Designer_Misbah One of the hardest work is to find the right answer to this. "What are the invariants in this code?" Any good suggestion on how to proceed?
English
1
0
2
70
misbahu
misbahu@bichistriver·
most auditors rely on Luck and Experience. they stare at code for 100 hours and pray they spot the error. ​that’s a low-leverage game. ​I discovered a cheat code: Formal Verification. Here is the Zero-to-Hero framework to mastering it. 🧵
English
9
7
84
5.4K
KiteWeb3
KiteWeb3@_Kite_Web3·
@arsen_bt "Develop attacker mindset"... the hardest point for me.
English
0
0
0
51
Arsen
Arsen@arsen_bt·
You can • Studying courses • Reading audit reports • Learning vulnerabilities But if you don’t: • Audit non-stop • Making ton of notes • Develop attacker mindset Nothing will change.
English
4
9
91
2.8K
apoorv.eth
apoorv.eth@apoorveth·
who here remembers this?
apoorv.eth tweet media
English
139
23
746
54.2K
KiteWeb3
KiteWeb3@_Kite_Web3·
2 Medium findings in @jigsawdefi protocol on @cantinaxyz and a 27th place for me over 759 competitors. Inside the 30th positions is fine but not enough. 💪 Celebration time completed, I'm return to study hard 🙇‍♂️🐛 #security #SR #Challenge
KiteWeb3 tweet media
English
1
0
30
947
phil
phil@philbugcatcher·
@_Kite_Web3 This is tough indeed, and valid for any profession. But in web3 sec, you can prove your worth by participating in public contests. There’s no better setup imo: you can just come in and participate. Do well, and winning teams will open the doors for you. I can guarantee you that
English
1
0
4
138
phil
phil@philbugcatcher·
> If I could give one advice, if you're young, join a winning team. Nothing teaches you more about winning than studying how winning teams win. You'll never be able to guess why from the outside.
Hari@hrkrshnn

Working inside Solidity taught me something counterintuitive about building successful products. Solidity has around 90% market share for smart contracts, effectively a monopoly. This puzzles people. How did a language modeled after JavaScript, often considered "inferior" to Rust or Haskell, become so dominant? It made no sense. I quickly learned that programming language experts, especially those on crypto Twitter, have different needs than real users. Example 1: The experts kept telling us that 'modifiers' were bad design and should be removed. We almost considered it. Then we ran our annual developer survey. Modifiers were rated the #1 most loved feature in Solidity! Shocking! Example 2: In version 0.8.0, we prevented arithmetic overflows by default. This change upset many experts, who claimed it was a bad idea. However, when I went to conferences, developers would walk up to me to say it was the best release ever, that they could finally stop worrying about arithmetic overflows and were genuinely grateful for the feature. The more opinionated the experts were, the further they were from real user needs. They can't be blamed. They weren't in the trenches with real users. Their view of an ideal user is really just themselves. One more thing Solidity did well is attracting people who might not have seen themselves as developers. Hayden had only used MATLAB and JavaScript before building Uniswap in Solidity. Today, Uniswap sometimes surpasses Nasdaq in daily trading volumes! This would never have happened if Solidity had been designed after Rust. This was an eye-opening realization for me that more crypto founders should study. Crypto has always been ignored by top traditional developers. I've had web2 friends challenge the legitimacy of the industry when they learned what I did. Solidity's accidental genius created a whole new group of developers in this new world. Hayden is one example. There are so many more. I meet people regularly whose first real programming language was Solidity. They have had life-changing experiences after that. And they do not fit the profile of a traditional developer. You need to internalize this if you're building a crypto platform that requires developers, creators, or founders to be onboard. You're better off cultivating talent from within rather than trying to onboard from outside the crypto space. This is why many failed at streaming x tokens. The Twitch streamers didn't care, and if you wanted to win, you had to cultivate talent organically from within. If I could give one advice, if you're young, join a winning team. Nothing teaches you more about winning than studying how winning teams win. You'll never be able to guess why from the outside.

English
1
3
54
3.4K
KiteWeb3
KiteWeb3@_Kite_Web3·
Day 48/1001: -starting reading the scope and understand the flows 📚🐛 #Challenge #goals #SR
English
0
0
0
56
KiteWeb3
KiteWeb3@_Kite_Web3·
Day 44/1001: - completing invariant tests 👩‍💻 - testing some functions using Halmos #️⃣ #Challenge #goals #SR
English
0
0
0
38