Yahia sherif

I found my first valid finding on @HackenProof 🥳 That's just the Begainning 🔥 Thanks @PatrickAlphaC @0xOwenThurm #web3security

@TheBlockChainer yes i currently own it on Whop whats next

@yahiasherif0 Awesome! You should have received an email with an invitation to join.

Watching someone teach is the weakest way to learn security. You nod along, feel like you got it, and forget 80% by tomorrow. Everyone knows the feeling. So for Zealynx Insiders we didn't just book a video call. We built our own live classroom into the Academy. Here's how a session actually works: → We walk through a real protocol together (first up: building Uniswap V2 from scratch). → But you don't just watch. Every step, you answer or write the code yourself, on your own machine, against a timer, while a live leaderboard tracks the room. → You get instant feedback, and every correct answer completes that section of your actual Academy coursework. Real progress, not throwaway trivia. Why this works when videos don't: you can't passively coast. Doing beats watching, a little competition keeps you locked in for 90 minutes, and immediate feedback means you fix a wrong mental model on the spot instead of carrying it for weeks. Build it. Break it. Compete. Remember it. Whether you're chasing your first paid audit, shipping a protocol you need to survive one, or founding something you can't afford to get hacked, you learn it the way that actually sticks.

@TheBlockChainer Nvm I found a way to subscribe through whop Waiting to start working 🔥

@yahiasherif0 hey @yahiasherif0! I think I found a way. Can you please dm on telegram: vendrell46 If you're really interested, let's get you set up to pay monthly with crypto.

@ACai_sec And audited by ai as well

Having reviewed BattleChain‘s code, I can deduce that this project was most likely designed and generated by AI. I previously audited a contract project that was 100% designed and developed by AI, and they shared the following characteristics: 1. Redundant code, with repetitive checks implemented differently but with the same meaning. 2. A large number of global variables implemented, with each function involving numerous modifications to these global variables. 3. Excessive function splitting and function implementation methods that defy human thought. 4. A very uncomfortable read. (🤪a very subjective reason

@TheBlockChainer Please we need a way to subscribe the monthly plan by crypto. I need to subscribe but my country won't work with the payment options provided

Founding members lock $20/month for life until July 16. After that, this price is gone. academy.zealynx.io/membership

@TheBlockChainer Are the audits on solidity only or there are more languages?

@0xWeb3boy Is it in rust?

The project had no BB program and I found a critical Chain halt issue. They agreed to reward me with their token. Small win for me as it was my first valid report in a Blockchain/DLT project 💁🏻

@micro0x00 @HackenProof @PatrickAlphaC @0xOwenThurm تسلم يا هندسة الله يبارك فيك ❤️

@yahiasherif0 @HackenProof @PatrickAlphaC @0xOwenThurm عملها الهكر الحقيقي البورسعيدي مبرووك

I found my first valid finding on @HackenProof 🥳 That's just the Begainning 🔥 Thanks @PatrickAlphaC @0xOwenThurm #web3security

@pent0ss اول واحد طويل و هيقعد معاك التاني محتاج تقرأه ونت بتطبق فخليه بعد الجيش

لو هاخد كتاب معايا فالجيش ايه احسن كتاب ممكن اخده Wep application hackers handbook OR Bug bounty bootcamp ولا فيه أحسن؟

@W3B_AI_SR @HackenProof Smart contract or web2?

Yeay, I was awarded for a valid submission on @HackenProof hackenproof.com #hackenproofed #bugbounty

@panditdhamdhere @ayuxhtwt That's because it's from chainlink + it's scope is very small, however I've already reported something on this contest I hope it's valid

@ayuxhtwt ChainLink Payment Abstraction V2

Some smart contracts teams are really good. Gone through the entire contracts codebase and found nothing ☹️ Y'all already ai taken it, could you please spare something for security researchers.

Earlier today, a user attempted to buy AAVE using $50M USDT through the Aave interface. Given the unusually large size of the single order, the Aave interface, like most trading interfaces, warned the user about extraordinary slippage and required confirmation via a checkbox. The user confirmed the warning on their mobile device and proceeded with the swap, accepting the high slippage, which ultimately resulted in receiving only 324 AAVE in return. The transaction could not be moved forward without the user explicitly accepting the risk through the confirmation checkbox. The CoW Swap routers functioned as intended, and the integration followed standard industry practices. However, while the user was able to proceed with the swap, the final outcome was clearly far from optimal. Events like this do occur in DeFi, but the scale of this transaction was significantly larger than what is typically seen in the space. We sympathize with the user and will try to make a contact with the user and we will return $600K in fees collected from the transaction. The key takeaway is that while DeFi should remain open and permissionless, allowing users to perform transactions freely, there are additional guardrails the industry can build to better protect users. Our team will be investigating ways to improve these safeguards going forward.

JUST IN 🚨: @ploutos_money exploited for (~$388K) due to a price oracle misconfiguration. The protocol used the BTC/USD Chainlink feed to price USDC, massively inflating its value. The attacker deposited 8 USDC as collateral & borrowed ~187 ETH. Website/socials deleted. Rug?

Low Confidence Infrastructure – APT43 (Kimsuky) 222[.]73[.]105[.]195 --> 0/94 This IP refers to 2 malicious files imperosnate Yunda Express 91[.]210[.]106[.]42 --> 0/94 146[.]70[.]81[.]61 --> 0/94 resolves --> health15hde[.]xyz 124[.]40[.]247[.]67 --> 0/94

I just published First Bug: Bypassing a Pro Tier Paywall with a Business Logic Flaw medium.com/p/my-first-bug… #BugBounty