♧▪︎Hobs▪︎♧

CX Specialist || Moderator || Technical Analyst || Product of Grace

[♧▪︎Hobs▪︎♧ @Hobs_131]

Everything i do leads to a better customer experience.
Explore my journey, view my portfolio-

https://t.co/2nVhSsktq8

[CharlesWang @0xCharlesWang]

First of all:

It will always be important to have human auditors. Intuition and logical sense of chaining bugs to specific impacts cannot be replaced.

BUT, what would be if:

There is an AI tool which is legitimately great and finds more than most traditional audit companies while no one knows about it just yet, while at the same time there is heavy marketing about all other AI tools that do not even remotely come close?

All @bailsecurity audits now just got an upgrade which is at least adding ON TOP of the two team audit the full coverage of traditional audit companies, for free of charge.

Instead of replacing human auditors and relying more on AI, we will add AI on top of the process to increase the coverage without any extra cost.

[♧▪︎Hobs▪︎♧ @Hobs_131]

@die_kreatur_rs Congratulations brother.

[die kreatur @die_kreatur_rs]

Today is the happiest day of the year, since I received an offer to join a web3 security firm as an intern smart contracts auditor 🥳

[Yousef @yusufthebdev]

Being an auditor low-key turns you into a lawyer.

Half the job is arguing why a bug matters.

[Immunefi @immunefi]

This Security Researcher has earned $1,714,402 hunting bugs.

22+ live critical vulnerabilities found, saving hundreds of millions of dollars from hacks.

Meet @__nnez

We asked him how he does it.

What is one practical bug bounty strategy that has helped you find better bugs?
"Choosing targets based purely on what excites me, either a cool new concept or a huge bounty. If a codebase kills my interest early on, it’s impossible to dig deep enough to find critical bugs. I only hack on things that keep me hooked. "

What habit, routine, or mindset has made you more consistent as a researcher?
"I let myself get bored. Bug bounty hunting generally rewards either incredible speed or deep uniqueness. Since speed isn’t my strength, I focus on the creative side. Being comfortable with boredom is what actually triggers that creativity, giving my mind the space to connect dots and find the bugs that require a different perspective. "

Can you share a memorable bug or win, and what helped you find it?
"I had found a logic bug primitive but couldn't figure out how to trigger it. After poking around the codebase for almost two weeks and thinking that I had exhausted everything, I just took my eyes off the code and went for a walk to a bar. On the way there, the idea popped into my head to test the sequential properties of a related function. It turned out to break at a very negative value, and I chained it with the primitive from a week ago to reach a critical impact. "

What is one piece of advice you would give to a researcher trying to level up or land their first bounty?
"Log off X and go hunt :) "

[Omoalhaja @omoalhajaabiola]

The cold email The response

[ARTHUR LABS @ArthurLabsDAO]

🛰 Connecting to the bounty hunters...

We are $HIIE, our mission: #BUIDL your prodocut

How?
Our Engine will let you build anything in plain language like a gadget or something that hasn't made it out just yet...

Try it out: https://t.co/rqaQ9mFGL6

Use the platform, fill in the form... you have a chance to win 50 USDC.

https://t.co/YN1E5tzJHG

[Yousef @yusufthebdev]

🎯 Day 96 of becoming a top Web3 security researcher

⏳ Hours worked: 5 hours
🔎 Focus: Learning
🔧 Practical work:
- Added significant depth to my threat modeling by working through @zaryab_eth comprehensive 71-item list for smart contract engineers
- Studied post-mortems

[♧▪︎Hobs▪︎♧ @Hobs_131]

@yusufthebdev Can i lock in with you??
I'm new to security research but have basic knowledge and have participated in exploratory bug bounties. I'd appreciate a response, thanks.

[♧▪︎Hobs▪︎♧ @Hobs_131]

@bloxprodio @XPRNetwork Hey, please can i send a dm??

[♧▪︎Hobs▪︎♧ @Hobs_131]

@bloxprodio @XPRNetwork Thanks, i contacted them through their site, the chat feature. I'm grateful for your help.

[♧▪︎Hobs▪︎♧ @Hobs_131]

@metalhelpsme @AnthonyOgbuefi1 @MetallicusTDBN @webauthwallet @XPRNetwork He's been very helpful to me, I'm grateful.

[♧▪︎Hobs▪︎♧ @Hobs_131]

Hello @MetallicusTDBN, i keep getting this error message while trying to verify my address. How do i find my way around this??

[♧▪︎Hobs▪︎♧ @Hobs_131]

@Hash42024 @MetallicusTDBN @webauthwallet @XPRNetwork How do you mean chief??

[♧▪︎Hobs▪︎♧ @Hobs_131]

@metalhelpsme @AnthonyOgbuefi1 @MetallicusTDBN @webauthwallet @XPRNetwork Already responded to the last email, hopefully they respond

[♧▪︎Hobs▪︎♧ @Hobs_131]

@AnthonyOgbuefi1 Your inbox isn't open chief

[♧▪︎Hobs▪︎♧ @Hobs_131]

@1NationUnderXRP @NickPirzada Someday I'll be touring with you to meetings and events, such lovely photos!

[♧▪︎Hobs▪︎♧ @Hobs_131]

@AnthonyOgbuefi1 It seems you have to follow back so i can send you a message.

[♧▪︎Hobs▪︎♧ @Hobs_131]

@AnthonyOgbuefi1 Your dm isn't open

[♧▪︎Hobs▪︎♧ @Hobs_131]

@AnthonyOgbuefi1 How do i reach out to you?

[♧▪︎Hobs▪︎♧ @Hobs_131]

@AnthonyOgbuefi1 Good day man, please i need your assistance in an issue i have with verification process in metallicus