Many people lately sent me DM asking how to become a security researcher and approach web3.
Here are some of the suggestions I gave to them (keep reading, it's a long one)
Hot take: DAO delegation is not a solution - its a workaround. Delegation is decentralization-charade which exacerbates apathy and creates a new class of un-invested, unaccountable, and populist whales. Workarounds can be useful - but they should not be confused with solutions.
@andyfeili@trust__90 Whats his progression into smart contract security looks like? Does he start from development > security? or straight to end goal security
This year (2022), I have worked on creating educational resources in various forms, such as blogs, Twitter series, mindmaps and others. In case you missed them, here are all of them:
# SecurityExplained Twitter Series:
- https://t.co/JqwwUom4eI
🧵 - 1/5
Solidity gas ⛽️ saving tip of the day:
If you have a mapping(uint256 => bool), you can use a bitmap to drastically reduce gas usage.
In the code below, the bitmap can lead to a ~95% reduction in write costs compared to the mapping.
More info below 👇
We've put together a @NotionHQ dashboard for web3 security researchers!
It contains heaps of resources and a neat template to help you organise your findings and navigate codebases.
Let us know what you like or whats missing below!
https://t.co/YrxJTsbQyp
One of the hardest things for new auditors is getting your head around a code base.
I remember feeling like I was aimlessly jumping in circles. Based on the DMs I've been getting, seems like this is a common experience.
Here's the process I now use for every audit...
@DarbyBaileyXO @_buildspace Yes its on chain, was thinking what else i can move off chain but I want to make it "work" for now rather than optimisation
@DarbyBaileyXO @_buildspace Very practical tool! Does it work on text to text summarization by extracting subtitles? or voice to text? Are you planning to work on other languages?
@hashmonke@_buildspace I think it had great potentials, not just builders but if we formed a community we can also reach out to products for probably sponsorship or discounts even hosting events.
So your main idea is to find relevant parties to your product? or smtg else like i mentioned above.
@danialhasan@_buildspace Your one liner is catchy with "Social Media Manager" on it. I do find it hard to understand your product, can you explain more by what "manage" meant? And why notion? Since there are better and more suitable services.