Oliver

Security Researcher
Ex-Senior Blockchain Engineer
DM for private security reviews

[Shieldify Security @ShieldifySec]

Last month we saw the creation of the new token standard — ERC404!

Now, there are already a couple of tens of ERC404s with a 300M+ market cap, which can be easily applied in RWAs, Gaming, NFT liquidity providing, etc.👇

[Oliver @Oliver_Secure]

Year 2023:
- $10,000 earned 📈
- 12 audits completed 📃
- 1000+ tutorials watched / read 💻

[Oliver @Oliver_Secure]

Do you know what SHA3 opcode is equivalent to?

[Oliver @Oliver_Secure]

The biggest liquidation to date had ~$330K USD profit, back in 2019. 🤯

[Oliver @Oliver_Secure]

Invoke the Pausable._pause and Pausable._unpause internal functions, with appropriate access control, e.g. using AccessControl or Ownable. Not doing so will make the contract pause mechanism of the contract unreachable, and thus unusable. 🚩

[Oliver @Oliver_Secure]

"Reputable company", but the report is a bit shitty I think, all findings are super overrated and poorly described. Can't really understand how the biggest protocols have paid a ton for this report. 🤔

https://t.co/jipsqQDEdC

[Oliver @Oliver_Secure]

You're searching for a developer position in a web3 company, @sideshiftai are the guys 👇

https://t.co/HWWeJ5QC6X

[Oliver @Oliver_Secure]

Ultimate repository with reproduced DeFi exploits 🔥

https://t.co/liDGpdRNMr

[Oliver @Oliver_Secure]

Well said, I would add try to simulated scenarios and user flows 💡

[Martin @ShieldifyMartin]

Understanding a complex protocol requires an approach that goes beyond just reading documentation. To gain a comprehensive grasp of the underlying idea, consider the following:

- Thorough Documentation Review
- Unit Test Analysis
- Internal Technical Specifications
- Flowcharts

[Oliver @Oliver_Secure]

Did you know that the keccak256 of an empty string is 0xc5d2460186f7233c927e7db2dcc703c0e500b653ca82273b7bfad8045d85a470? 🧐

[Oliver @Oliver_Secure]

What if the protocol that you audited gets hacked? 🧨

I'm thinking about how would I proceed in such a situation and can't think of a proper scenario.

[Oliver @Oliver_Secure]

Scaling solution for Ethereum - Zero-Knowledge Rollups 🚀

https://t.co/cPhZg28H0e

[Oliver @Oliver_Secure]

AI tools designed specifically for smart contract auditors 🫡

https://t.co/Knq6L7zq58

[Oliver @Oliver_Secure]

While carefully reading past reports, I often see how two totally different reports of the same vulnerability are paid equally. The better one in most cases includes a detailed PoC.

[JohnnyTime 🤓🔥 @RealJohnnyTime]

Interested to see a behind-the-scenes on a full private solo smart contract audit? From initial contact to final report delivery, including code cleanup, security assessment and more 🤓🧵

[Oliver @Oliver_Secure]

Remeber luck is when the great preparation meets an opportunity or whatever.

[Oliver @Oliver_Secure]

@0xKral Yep, good point

[Oliver @Oliver_Secure]

Flexing with <$1 payouts from contests is strange

[Oliver @Oliver_Secure]

@jonatanjimeneza 🧐

[Oliver @Oliver_Secure]

Smart contract security audit costs between $50 and $120k a week!
What makes such a difference?

[Oliver @Oliver_Secure]

Nice channel for web3 devs 👇
My favourite videos are Gelato Relay API related ones

https://t.co/9ZPV4I2cey