4nescient

Web3 Security Researcher

[4nescient @4nescient]

Thrilled to see the results from my very first contest ✅
I submitted just one finding… it got validated… and ended up being the only valid bug in the entire contest🤯
Guess that means 100% coverage on my first attempt 😅
Beginner’s luck? Sure, but I’ll take it 😏

Big thanks to @sherlockdefi for the fun experience. On to the next hunt 🕵️‍♂️

[Sherlock @sherlockdefi]

🏆 @neutrl Audit Contest Results 🏆

Congrats to:

$118,000 rewards ➡️ $16.4M+ paid out in rewards.

[go4ko @0xgo4ko]

Some recent contest rewards from @HackenProof. Not much, but it's honest work.

Smooth collab with @4Nescient as always. We're officially ranked 62nd on the All-Time Leaderboard 🏆

Keep grinding, guys, and whatever happens, happens. Not like we have a choice anyway...

P.S. Hope I can share bigger results with you soon, but unfortunately these things take time.

[4nescient @4nescient]

@IMMANUX2160 @immunefi Appreciate it 🙏

[4nescient @4nescient]

My very first bounty, back to work. 🫡

I just found a confirmed bug on @immunefi #immunefitribe https://t.co/YaCsut7JMU

[4nescient @4nescient]

@0xRrudy @immunefi Thank you ser

[4nescient @4nescient]

@asyncmarcin1337 @immunefi Appreciate ur kind words.

[4nescient @4nescient]

@danielem33 @immunefi Thank you! 🫡

[4nescient @4nescient]

@AlxGdi @immunefi Thank u ser.

[4nescient @4nescient]

@immunefi 's plan to publish confirmed bugs mid-contest helps, but it's a partial fix, there's still a lag between submission, triage and announcement.
And without duplicates, is it still a contest, or just a bug bounty with a time limit?

[4nescient @4nescient]

Firelight audit competition results are out. Some interesting stats from the leaderboard:

1. 189 valid reports, but only 8 unique bugs
2. Assuming invalids are only half of all submissions: ~378 × $25 = ~$9,450 in submission fees, against a $20k prize pool

[Immunefi @immunefi]

The @Firelightfi Audit Competition is a wrap!

🏆 Top Winners:
🥇 @aussinfosec - $7,960
🥈 @Tradi3_ - $3,591
🥉 @buganbug - $1,783

Congrats to all participants & winners! 🎖

[4nescient @4nescient]

3. Even assuming all SRs on the leaderboard have zero invalid submissions and no $250 mediations, 112 of the 133 whitehats are net negative.

[4nescient @4nescient]

@0xgo4ko Goes without saying, hopefully there will be future contests 🙂

[4nescient @4nescient]

2nd out of 1,480, with 3 valid medium findings.

Really proud of what we pulled off and even more proud of the quality and consistency behind it. Hats off to @0xgo4ko for his exceptional performance in escalations as always, and pushing for the right calls. 🤝

Invalidatoors are just getting started.

[go4ko @0xgo4ko]

Yo, me and my bro @4nescient ranked 2nd 🥈 in the @metricxyz contest on @sherlockdefi as team Invalidatoors 🤝

Escalations were fierce and the competition was stacked with top SRs, especially with a codebase this complex. You need to know your stuff perfectly so you can defend your findings even in your sleep - otherwise, the other contestoors will crush you.

Huge thanks to @Taridoku for judging 3k+ reports. Insane work from an amazing SR.

P.S. Next time, we’re taking the top spot 👊

[4nescient @4nescient]

@Afriauditor @immunefi Nice work

[4nescient @4nescient]

Regardless of how the market is performing, there are always self-motivated individuals who find ways to contribute. @0xgo4ko is one of them, and it's a pleasure to work with him. Greater things to come. 🫡

[go4ko @0xgo4ko]

Long time since I last posted results on here (quite busy with exams and other work), but there was always time for contests, I guess 😅

So, firstly, three contests with my bro @4nescient as team Invalidatoors (our team is Top 100 All Time on HackenProof btw). Thanks for the great experience and hard work, man 🫡

- 0xMarkets (HackenProof) - 6H, 7M, 3L, 7th place. Decent reward and reputation. Manual review + AI for bug hunting, triage, PoCs and polishing reports. Our only regret was joining too late.

- TipRun (HackenProof) - 3C, 2H, again a very decent reward. Our first prediction market audit. Learned a lot, although once again we joined late.

- XRP Ledger (Sherlock) - 1M, 1L. Large, complex codebase and our first C++ audit. This contest convinced me to start integrating AI much more into my workflow, especially for large repos.

Solo:

- Revert Finance StableSwap Hooks (Cantina) - 1H, 1M. Awesome learning opportunity: Uniswap v4, Hooks and Curve-style AMMs.

- DreApp (Sherlock). Stablecoins (alongside LSTs and Lending) are still my favorite protocols to audit. Unfortunately, the contest had no valid H/Ms, but I still received leaderboard rewards.

Huge thanks to @HackenProof, @sherlockdefi and @cantinasecurity. I know contests aren't what they used to be, so opportunities like these are always appreciated. 🤍💜🧡

Also, it's been great seeing so many talented SRs bagging some awesome bounties lately. Congrats to everyone putting in the work and securing this space. You are a huge motivation to me and many others 👏

[4nescient @4nescient]

@0xgo4ko @CODESPECT Under the invalidatoors name of course 😏

[4nescient @4nescient]

Another one done, thanks @CODESPECT for the opportunity.

[CODESPECT @CODESPECT]

3/ 🏆 The full leaderboard payouts

Every researcher below earned their slice of the pot. Take a bow

@heavyw8t_ → €3,901.76
@Huntoor → €1,939.94
@brandon_shi → €1,821.80
@xxiv_eth → €1,783.58
@4Nescient → €1,665.45

[4nescient @4nescient]

@snufflesrea @CODESPECT Appreciate it 🙏

[4nescient @4nescient]

@zuhaib44 @CODESPECT Thanks Zuhaib 🙌

[4nescient @4nescient]

@CODESPECT Looking forward to future audits🫡

[4nescient @4nescient]

@luc1jan @_MathAcademy_ @rustlang I admire the consistency ser, keep going 🫡