blockDotAuditor

175 posts

blockDotAuditor banner
blockDotAuditor

blockDotAuditor

@blockDotAuditor

Blockchain Security Researcher 🔍 | My username? As unique as the bugs I hunt down!🐞 | Making Web3 safer, one block at a time 🛡️ | DM for collabs 🤝

onChain Katılım Kasım 2024
120 Takip Edilen16 Takipçiler
blockDotAuditor retweetledi
pashov
pashov@pashov·
1% daily improvement leads to 37x growth in a single year. Don't fade compound growth - show up daily, pay the price, do the work. It's what I did so far and I will continue doing it🫡
English
9
13
140
9.8K
blockDotAuditor retweetledi
Slavcheww
Slavcheww@Slavcheww·
Can’t juggle two jobs and want to commit to Web3 fully? Do this for 3–4 months: 1. Start audit contests 🧠 2. Go all in — not “2–3 hours on weekends,” I mean every spare hour you can put in. 3. When the report drops, read it like it’s your bible. Study every finding, every PoC, every detail. 4. Repeat. Again and again. If that doesn’t change your results… Ping me.
English
4
17
152
7.5K
blockDotAuditor retweetledi
0xGondar
0xGondar@0xGondarxyz·
The biggest myth? "I need more courses." Nah. Audit 5,000 lines of code. Miss 20 bugs. Then you’ll learn. Theory without pain teaches nothing.
English
6
10
150
4.3K
blockDotAuditor retweetledi
pashov
pashov@pashov·
You want to make friends (or "network") in crypto & web3? A.B.H. Always Be Helping. Do it for just 6 months, no excuses - you'll change your environment completely🫡
English
17
8
161
7K
blockDotAuditor retweetledi
pashov
pashov@pashov·
Stop just admiring the people who crush it in web3 Start studying what they made them successful instead Studying is the #1 activity for a self-development addict
English
10
10
184
7.4K
blockDotAuditor retweetledi
JohnnyTime 🤓🔥
JohnnyTime 🤓🔥@RealJohnnyTime·
Smart contract auditing is 50% hacking, 50% research. You’ll spend HOURS digging into: 📜 Old EIPs 📚 Protocol whitepapers ⚡ Solidity changelogs If reading bores you, this field isn’t for you.
English
6
8
94
3.7K
blockDotAuditor retweetledi
Yotov
Yotov@yotov721·
If your project does NOT have unit tests it is definetly NOT ready for an Audit. If you are thinking that just an audit will solvo all your security concerns, you are setting up for failiure. I've uncovered multiple issues while writtin unit tests. Writting unit tests is the dev team's job, not the security researchers's.
English
5
4
35
2.3K
km
km@0xkmmm·
Another 2nd. Thank you @cantinaxyz for the opportunity.
km tweet media
English
7
0
83
2.4K
blockDotAuditor retweetledi
Pashov Audit Group
Pashov Audit Group@PashovAuditGrp·
Our security audit process is >95% perfect. Very scalable, both collaborative and competitive, just the right amount of auditors and experiences and unbiasedness. Still trying to improve the last 5%, we want it 100% perfect🫡
English
3
1
32
1.7K
blockDotAuditor retweetledi
ddimitrov22
ddimitrov22@ddimitrovv22·
Protocols that you should study before building anything or starting auditing: - AAVE v3 - Compound v2 - Uniswap v2 & v3 With over 1000 forks and a TVL of more than $10B, there is a lot to learn from them. Study the code and all the concepts and it will serve you well.
English
7
15
137
3.8K
blockDotAuditor retweetledi
Patrick Collins
Patrick Collins@PatrickAlphaC·
It’s really depressing to see posts like this. We as an industry have pushed under the rug calldata verification because “we just want to get people on the door”. But that needs to end now. You either understand your transactions, or you use a wallet that will help you understand. Using a wallet that doesn’t help you understand should soon be considered as worthless as using a wallet that exposes your private key.
tobi@tobific

I've not been posting consistently for the past few days my wallets were compromised and drained and i've been depressed and had lost all my will to post or do anything on chain the worst thing about all of this is i've absolute no idea how this happened, most likely it's a case of a malware in my old windows pc to make things worse, the wallets hit were all my main farming ones, before the harvest season, they were drained manually and by the time i realised, they were drained except of a few of my NFTs such as sappy and ens etc even tho most fund was drained, i was able to transfer my nfts to another wallet and i guess that triggered the manual drainer to impose a safe contract on my main wallet smh even tho all of this happened before the loudio experiment, i still yapped hard cuz i thought it'd recover me something back and i'll not get this chance again to maybe "make it all back" but it wasn't it my overall portfolio and worst of all, the "pre-rich" bags have taken a massive hit and now that all the dust has settled down, i've tried to note down all the mistakes i made that could've been avoided & consulted a friend and have taken some steps to get back on tracks - the worst and worst of mistake i made was i stored too much on my farming wallets & i didn't used a ledger. such a rookie and noob mistake you could say but it's a lesson for me and i've gotten a couple of ledgers, one for storing assets and one for farming wallets - i had just one laptop pc for years before 2025 (i bought a new mac this year in feb) and used it both for crypto and my personal stuff and didn't cleared it even after transferred most of my usage stuff to the mac - my farming were too unorganised and messy and wallet keys were stored on notes and stuff, instead of ledger or actual paper - my workflow was too chill cuz i did all stuff on a laptop, laying on my bed all day, and for that, i've decided to make a proper desk workspace and properly dedicate myself to my brand and me i realise even tho all of this is too much, i've got no other way to "make it" for me and my family and like most of CT people, i can't talk about to it to my family too cuz they don't know about this hustle at all but it's okay and i've considered it as kind of a divine intervention to try it all once again, with all might i'll start again with new farming wallets, building on-chain footprints and giving it all of my knowledge and this time it'll more vigorous than ever it'll take some time but i'll be posting on full throttle mode back soon and once i've got everything settled in an organised manner, i'll get back on tracks with everything i've got peace & love to y'all, it's time to go all in one last godspeed

English
16
16
199
21.1K
blockDotAuditor retweetledi
pashov
pashov@pashov·
Anybody in web3 security that doesn't understand that helping everyone around him will grow the overall quality of security services, which will help builders build more stuff, which will help increase demand of audits, which will help YOU, is not smart enough. HELP EACH OTHER🫡
English
12
25
234
7.2K
blockDotAuditor retweetledi
pashov
pashov@pashov·
Safe path to $10k/month in crypto (REAL) 1. Study web3 security (Cyfrin Updraft courses) 2. Start doing security contests, put big efforts, start winning (takes a few months if you're a hustler) 3. Get invited to do freelance audits on the side The only way to fail is to quit🫡
English
27
65
592
23.7K
blockDotAuditor retweetledi
Owen | Guardian
Owen | Guardian@0xOwenThurm·
How it started: 8 billion people on 10 chains vs how it’s going: 10 people on 8 billion chains
English
6
7
109
4.6K