Synthrax

Security Researcher |

[Synthrax @0xSynthrax]

2025 was an interesting year.
• Left my dev job at the beginning of the year
• Became full time crypto degen
• Missed programming after 6 months and decided to learn blockchain development
• Discovered Web3 audits and fell in love
• Got my first contest result in September
• Got my first private audit 2 months ago
• Made a lot of great connections
• Closing the year with 4 private audits
Plans for 2026: make it all count

[Synthrax @0xSynthrax]

My first private audit collaboration got finalized today🔥
Grinding started to pay off 😎
Feels like a big step forward

[Synthrax @0xSynthrax]

@4gontuk 👀

[CODESPECT @CODESPECT]

The 50 accepted participants for SpecSiege have just been emailed. A strong applicant pool, and an honour to have this group on board.

If you didn't get that email today, hold tight. We had more strong candidates than slots, and we're holding the "not this time" emails until the 50 confirms, that way anyone who'd be next in line moves up from a real waitlist instead of getting a rejection we'd want to walk back. Either way, you'll hear from us.

Thank you for applying.

[CODESPECT @CODESPECT]

SpecSiege of the ERC6909 bond platform is going to be hard. We know.

So we're shipping a detailed README with the invariants the protocol must hold and the system's global properties. The project's own docs are extensive too, worth reading. None of it is required; all of it should sharpen the audit.

The hook: a reasonable way to break a documented invariant is a strong candidate for Medium, which unlocks the whole pool.

[CODESPECT @CODESPECT]

How judging works on SpecSiege for our upcoming contest.

@0xSynthrax leads, with the full CODESPECT team who audited the project behind him on verification (If needed). AI handles initial triage, humans make the call. Every submission gets a verdict, valid or invalid, with the reasoning. No silent rejections.

Submit findings as soon as you confirm them. POCs are appreciated. A lot of the issues we expect will come down to the lifecycle of objects and invariant breaks.

It will be challenging. But a second pass almost always surfaces something. Fresh minds catch what the first team stopped seeing.

[Synthrax @0xSynthrax]

@0xmishoko Oh really? Haven't seen any Sherlock contests with that model.
But glad it's going that way.

[Synthrax @0xSynthrax]

Please tell me this includes a pay for submission model

[SHERLOCK @sherlockdefi]

A completely new security format is emerging.

One of the biggest protocols in Web3 is working with Sherlock to put it to the test.

June 15 to July 6.

More revealed tomorrow.

[Synthrax @0xSynthrax]

When you know there is an issue in this suspicious function but you just can’t prove it yet.

[Synthrax @0xSynthrax]

@zuhaib44 @CODESPECT

[Synthrax @0xSynthrax]

Did you already register for the upcoming @CODESPECT contest?

Good contest performance is a lot more valuable during markets like this.

Btw I’m going to be the judge 👀

Don’t miss the opportunity👇

[Synthrax @0xSynthrax]

Started a solo audit a few days ago.

The ones grinding through bad markets are the ones who win when things turn around.

Stay busy, anon.

[Synthrax @0xSynthrax]

Did you already register for the upcoming @CODESPECT contest?

Good contest performance is a lot more valuable during markets like this.

Btw I’m going to be the judge 👀

Don’t miss the opportunity👇

[Synthrax @0xSynthrax]

https://t.co/wgysMGgYvr

[Synthrax @0xSynthrax]

Started a solo audit a few days ago.

The ones grinding through bad markets are the ones who win when things turn around.

Stay busy, anon.

[Synthrax @0xSynthrax]

New contest👇
Don’t miss the opportunity anon

[CODESPECT @CODESPECT]

As promised. Today, we have a big announcement

We're launching registration for SpecSiege.

It's our double-check format for audits. First, an internal private audit went through the code with a full manual review. Then the community review follows. 10 days of open review on a fairly large codebase, we know, but the chance to work on an ERC-6909 European bond platform, an institutional project, doesn't come around every day.
- €15K total pot (€13K community pool, €2K fixed for the lead researcher).
- If only Lows are discovered, €5K is distributed instead.

Simply find bugs after us and get rewarded. We value your participation. We're not here just to squeeze you.

Link below ⬇️

[Synthrax @0xSynthrax]

Something’s coming 👀
Stay tuned

[Talfao @talfao1]

I've always valued the web3 security community.

Tried to share my path early. A lot of Cairo posts back then. That was how I differentiated myself, and some security takes along the way.

Tomorrow, with @CODESPECT, we push it further with an opportunity we haven't opened up before.

Stay thrilled.

[Synthrax @0xSynthrax]

@lonelysloth_sec Gaming community doesn’t like anything AI generated in the games, so studios are afraid of adding things like that. There were a lot of cases with negative backlash when community discovered that in some aspects(not connected to programming) there was AI used.

[Synthrax @0xSynthrax]

@blckhv Which “auditors are cooked” ai innovation are we on right now? I’ve just lost count

[Synthrax @0xSynthrax]

@talfao1 Sign of success

[CODESPECT @CODESPECT]

CODESPECT is proud to support @Solbuildersclub.

We've agreed to provide special perks for community members. If you're part of SBC, you can reach out to us for discounted security services, security guidance, and a free initial consultation on the security behind your project.

Supporting builder communities is core to what we do. @solana is a great example of how strong communities ship great products.

Members can DM us or reach out through the club to get started.