Hunter

Hunting Bugs Everywhere | for private audits

[Hunter @Huntoor]

Alhamdulillah, i have won the @InfraredFinance contest.

Its been a while since my last posted win😅.

2nd consecutive contest and win, is it the rise?

Some stats:
- Time spent: 7 days
- was the only one to find all high severity issues
- Found the only solo in the code

The main thing iam happy with in this contest is the amount of learning i got:
- read a lot of EIPs (some were unrelated to the code but was intuitive to read more through)
- read some geth code, and got a grasp of how consensus/execution layers work on the code level
- read one GEAS
- run my first local node to build a POC

Downside for the above learnings is the % of coverage of those beautiful medium severity edge cases by those beautiful auditors

This code has one of the longest call flow i have ever seen.

I Love staking More than DEXs Auditing, Had much fun auditing this one

Also i may decrease my contests participation alot(in general and not related to specific platform)

Plans?
- Leverage more time on niches i believe in and love
- Join firmsss
- Only participate in contests that add to my knowledge and have proper incentives
- Become a judge (judging protocols that i love auditing), meh least likely because of the big amount of spams currently in the space and how judging may make me a hated person from newbies.

[Hunter @Huntoor]

@dvrvsimi @only01Essential @0x15_eth @lonelysloth_sec you don't.

make a recurring script till the bug gets deployed. learned that the hard way, trust me

[Hunter @Huntoor]

@WhiteHatMage happened to me twice already

[Hunter @Huntoor]

@0xriptide Informative

[CODESPECT @CODESPECT]

As promised. Today, we have a big announcement

We're launching registration for SpecSiege.

It's our double-check format for audits. First, an internal private audit went through the code with a full manual review. Then the community review follows. 10 days of open review on a fairly large codebase, we know, but the chance to work on an ERC-6909 European bond platform, an institutional project, doesn't come around every day.
- €15K total pot (€13K community pool, €2K fixed for the lead researcher).
- If only Lows are discovered, €5K is distributed instead.

Simply find bugs after us and get rewarded. We value your participation. We're not here just to squeeze you.

Link below ⬇️

[LonelySloth @lonelysloth_sec]

If LLMs finding bugs missed by multiple human auditors makes it super-human.

When I find bugs missed by multiple humans and AI does it make me super-super-human?

When then people catch bugs I missed do they become super-super-super-human?

Congrats to teams finding bugs with whatever tools they use.

But for the people making a living off bounties, finding stuff missed by dozens of the best auditors is just a Tuesday.

Nothing super human about it.

[Hunter @Huntoor]

@0xfrsmln @brandon_shi its informational.

if you think about it for a second, everything can turn informational

[Hunter @Huntoor]

@0xIconoke agree

[Hunter @Huntoor]

@bichistriver 🙃

[Hunter @Huntoor]

where are those roadmap to success posters. i miss you guys.

[Hunter @Huntoor]

@0xlookman smuh, don't please😂

[Hunter @Huntoor]

@ret2basic 😂😂😂

[Hunter @Huntoor]

@seunlanlege @adeolRxxxx

[Hunter @Huntoor]

@banditx0x sir, you are spending openzeppeline money for having fun or for actually earning?😐

[Hunter @Huntoor]

@Haxatron1 confirmed, people are paying more than will be earning🤣

[0xFrankCastle🦀 @0xcastle_chain]

It is happening!

Week 4 is finally live. Join the Super League of Solana hackers, find vulnerabilities in the FrankSol protocol built with Anchor V2, and earn real money.

1st place: $500
2nd place: $300
3rd place: $200

Like and repost as a sign of participation — let's go!

[Hunter @Huntoor]

The norm is to not follow SLA

[bbl4de @bbl4de_xyz]

@oot2k1 @asen_sec thinking in systems + bug hunting intuition + AI => you can audit pretty much anything

[Hunter @Huntoor]

@ZeroK_____ @jump_firedancer you need a nuclear reactor for a PoC😭

[Hunter @Huntoor]

@zerocipher002 i think its the way arround. you shouldn't hunt on any protocols except 1.2.3

the honest parties are very narrow

[Hunter @Huntoor]

@0xMSF14 @immunefi @code4rena web2 did worse than that and it still lived