Few results that I have not uploaded here. Waiting on Story protocol results.
Took a break from auditing during Feb-Mar (for a development project), it's time to become active again and continue the grind.
@pashov One of the 10 people as I made a mistake in providing the correct telegram handle but congrats to all those who have been selected. This will be a great experience for them.
The countdown begins... ๐ช
Mark your calendars: @ethereumfndn is launching a new $2,000,000 competition on Cantina.
We're looking for researchers to help shape Ethereum's future and secure Pectra - the next major upgrade.
I'm really happy I participated in this contest and competed for the prize pot and the @EgisSec challenge. It really motivated me to give my all.
Thanks for the challenge, @dethSCA and @nmirchev8. You guys are doing a great job, both in and out of competitions.
๐ Let's congratulate @0xDenzi_ for being the winner in our initiative.
๐ He just 7.5x his reward from the competition thanks to @EgisSec
๐ธ The reward has been sent
Chaining some results together now, 3rd 3 digit payout.
There were only 2 valid issues, I've missed the more rewarding one but I am happy that I got 1.
The 3rd place badge looks super cool and I'll work harder to get even more cards. These are sick.
6. If the protocol is using Uniswap v2 reserves, do go over how a malicious user can effect the protocol by taking a big flash loan and changing the reserves.
Some notes that I have made after reading the Zivoe Report to see why I did not find some of the bugs.
There are a lot more than what is included in the post but these are the ones which I am hoping will stick in my brain for all future contests.
4. Do not skip over emits, In Zivoe a function was emitting an array index out of bounds which caused the transaction to revert.
5. Always check to see what happens to rewards which are deposited before any amount is staked in to the system.
My 2nd 3 digit payout, Really happy about the result but I definitely could have gotten more.
Today, I'll be going through the report and make notes on why I missed the rest of the bugs and improve.
Goals for future contests
1. Top 10 Finish
2. 4 Digit payout
Understanding the bugs missed and making notes on why they were missed is instant growth. This contest was definitely worth it not because this is my biggest payout but the fact that there are 19 issues which I've missed and I'll be making sure I never miss them again.
Final Day Update on Gamma Contest @sherlockdefi
Wrote tests for possible vulnerable vectors which I noted down in my 1st and 2nd pass, Couldnโt get the code to break as it was well written and robust.
Made 1 submission for which I am hoping is valid.
Time Spent : 6 hours
Day 2 Update on Gamma Contest @sherlockdefi
Went through the code again, I have about 10-12 bookmarks placed which I will explore further in tests.
Hoping to make a few submissions if everything goes well tomorrow.
Time Spent : 5 hours 15 mins