Aman
1.3K posts
Aman
@WebdevAnas
Smart contract Auditor
India Tham gia Haziran 2021
252 Đang theo dõi193 Người theo dõi
Three years ago I submitted my first Web3 contest entry on Code4rena.
Found one QA issue. Thought maybe I'd chosen the wrong career path.
This year I collected $300,000 from a single critical bug report.
This space rewards depth and patience in ways I didn't fully understand when I started.
English
@soarinskysagar Hey bro to submit finding in HackenProof, do we need to deposit some funds?
English
Day 116 of sharing my progress till I make it as a web3 SR
Continued to audit the Dexalot contract and reading up on some past reports to see what I missed in other audits.
English
English
@WebdevAnas @yusufthebdev @chainlink @code4rena i think they are still like 4 contest going on right now... they may have reduced alot, but definately not the last one.
English
🎯Day 12 of becoming a top Web3 security researcher
⏳ Hours worked: 5 hours 40 minutes
🔎 Focus: Auditing
🔧 Practical work:
- On-going @chainlink audit on @code4rena
- Focused on business logic bugs
- Studied some auction attack vectors on solodit
English
@Cryptdark1 @yusufthebdev @chainlink @code4rena Bro the contest is becoming history now, I think this is the last contest right now.
English
@yusufthebdev @chainlink @code4rena Very true bro.. I still remember when I got hook on a poc that keeps failing. Contest is ending in few hours 😅
English
@AdityaK0010 @immunefi Congrats brother, can you please guide me how to start bug bounties, how is it different from contests. Please brother.
English
I just found a bug and got paid on @immunefi . The Protocol team was very active and responsive . Great to know there are teams who still value the good service .
(Can't take their name due to Immunefi rules) #immunefitribe
immunefi.com/s/ss/?severity…
English
@bichistriver I want to start bug bounty, I have experience with audit contests. Could you please guide me how iss it different from audit contests and how should we change our approach.
English
1. In bug bounty programs, I only hunt for critical vulnerabilities that lead to direct loss of funds, chain split or chain-wide halt
2. A high with significant loss that the protocol must care about
3. Or a medium with high likelihood but low impact.
4. I do not submit mediums with low likelihood but high impact, they are usually gated by access controls (attack through previleged accounts is out of scope always)
English
@WebdevAnas shadow auditing + bug bounty.
with the current market, intern seems an option too
English
Constantly auditing top protocols and challenging yourself makes you smarter everyday and makes auditing less complex codes be very like a toy.
constantly auditing simple protocols in your comfort zone makes you dumber every day, and makes auditing complex protocols a nightmare.
English
most Indians earning from abroad or in crypto are doing taxes wrong 🇮🇳
don't be that person 💀
i’ve taken 100+ calls in the last 30 days with freelancers, traders, and exporters
( comment “ GUIDE ” and I’ll send you exactly how this works )
>even people earning $50k–$90k still confused about basics
>either overpaying 30% or using risky payment routes
i put everything into one clear guide
RT this for visibility
English
Day 15 of becoming a Smart Contract Developer🔥
Finally Finished my beginner's course on solidity with @CyfrinUpdraft.
Today i learned:
✅Immutability and constants
✅Custom Errors
✅receive and fallback
✅Ai Prompting
Moving on the foundry course on solidity 💪
#web3
English
Hey everyone,
As AI is moving fast and audit contests seem slower these days… what should we focus on now?
I’m a bit confused, any advice?
@Al_Qa_qa @Pro___King1 @chrisdior777
English
Not bad for my first Rust contest 🎉🎉🎉🤗
Code4rena@code4rena
The results of the $40,000 Rujira Audit Competition are in! Shoutout to everyone who submitted valid findings, especially to @bbl4de_xyz on their first, 1st place finish! Much respect to @RujiraNetwork for their commitment to security! Full list of winners in thread!👇
English
Joined the current sui contest, i will give my 100%.
SHERLOCK@sherlockdefi
Live now! @CurrentSUI audit contest on Sherlock — Move lending on @SuiNetwork, 41,500 USDC, live issues enabled! Current (formerly Pebble) is the capital efficiency engine for Sui DeFi: 1-click Multiply strategies (up to 16x) on LSTs + yield assets, plus isolated on-chain margin markets. Hunters: keep a close eye on flash loan manipulation paths! audits.sherlock.xyz/contests/1256
English
Excited to share that I just joined the @QuillAudits_AI family 🚀
English