Sabitlenmiş Tweet
Auditing is finding bugs others missed.
Evolution of solving smart contract security (aka how to find bugs in 2026):
❌ Static analysis is blind to logic
❌ Fuzzing may find logic bugs by accident, but is blind to integrations
❌ Invariant fuzzing covers logic + state, but blind to spec gaps and unknown invariants
❌ Formal verification proves what you specify, but blind to what you didn't specify
❌ Spec-to-code compliance catches spec gaps, but blind to implicit assumptions never written
❌ Human adversarial reasoning covers the rest - but doesn't scale
❌ AI pattern reasoning scales human thinking based on past patterns, but not novel ones ("This looks like a reentrancy. I've seen reentrancy before. check for reentrancy.")
👾👾👾 Then there was first-principles reasoning
"This contract holds ETH. ETH can move. Who controls when it moves? What happens if it moves at an
unexpected time? What state is inconsistent if that happens?"
With Claude Code + Skills in 2026 we can remove the blind spot, but it requires:
🧠 deep domain expertise
🥷 creativity
💰 funds
AI skills are the solution for first-principle reasoning. however, auditors ignore the 3 requirements.
They do so by:
❌🧠 Skipping the domain expertise, and asking AI to generate the checklists
❌🥷 Skipping creativity by copying each others fully AI-generated logic
❌💰 Careless on token spend
The alpha is that to find bugs in 2026 you need to work in researching the deep extra specific domain expertise, add your creativity and personal takes to it, and optimize it like every word matters (which it does). This doesn't scale right away but it does over time.
Exactly how it's done today:
👉 3 terminal tabs, each running tmux with 2-4 claude code panes
👉 claude sonnet 4.6
🪨 caveman skill for token optimization
🧠 obsidian vault for memory and organization
👉 secret ingredient: research what you audit
🧪 occasional experiments with guest skills from our community's finest
If you are doing this too, interested to learn and research together and want to hunt bugs - we should be friends
Comment below, and I'll DM 🤍
English
