laksh

Web3 enthusiast | Letting curiosity drive my passion | On a journey to become smart contract developer | Here to learn, unlearn and co-create together...

[laksh @OxLakshay]

Excited to share that I’ve joined a new role in Blockchain Development & Smart Contract Security 🚀
Ready to build, break, secure, and keep leveling up in the Web3 space. On-chain journey continues 🔐
thanks @CyfrinUpdraft @PatrickAlphaC

[laksh @OxLakshay]

Back after a short break was busy with interviews but kept learning along the way. Getting back to development, exploring Uniswap protocols in depth, and continuing practice audits on platforms like First Flight 🔍
#Web3Community #Web3Security

[laksh @OxLakshay]

Jumping into Ethernaut 🧩 after revisiting my previous audits — time to sharpen my exploitation skills, revisit core vulnerabilities, and strengthen my smart contract security fundamentals..
#Web3Security

[laksh @OxLakshay]

Getting hands-on with Huff & EVM opcodes — exploring how calldata loads onto the stack, how operations interact at the byte level, and how low-level control flows shape smart contract behavior. Understanding the EVM from the ground up..
#BlockchainSecurity

[laksh @OxLakshay]

Starting a deep dive into the EVM - learning assembly, opcodes, and formal verification to understand how every instruction executes on-chain. Grasping the low-level behavior of smart contracts is key to finding hidden vulnerabilities & improving audit precision..
#Web3Security

[laksh @OxLakshay]

Diving into MEV attacks ⚡ how txs can be reordered for profit. Exploring Flashbots prevention, using private mempools & commit-reveal schemes to keep transactions safe from front-runs & value extraction..
#web3security #BlockchainSecurity

[laksh @OxLakshay]

Digging back into EIP-191 while auditing BossBridge. The MessageHashUtils contract relies on it for signing & validating messages — a core piece for ensuring secure cross-chain deposits & preventing replay attacks .
#web3security #BlockchainCommunity

[laksh @OxLakshay]

New audit in progress — a bridge for moving ERC20 tokens from L1 → L2. Deposits lock tokens in a secure L1 vault, events notify off-chain relayers, and equivalent tokens are minted on L2. L2 part still under construction..
#Web3Security #blockchain #zksync

[laksh @OxLakshay]

Auditing taught me the importance of storage . In proxies & upgradeable contracts, all implementations share the same storage layout — a mismatch can cause storage collisions , breaking functionality or exposing vulnerabilities.
#KeepGoing #Web3Security

[laksh @OxLakshay]

Sometimes the toughest bugs in smart contracts hide inside calculations . Auditing means double-checking every formula, every edge case, every assumption
#Web3Security #BlockchainSecurity

[laksh @OxLakshay]

Auditing the ThunderLoan project ⚡️ revealed a centralization issue — where critical functions are controlled by a single authority. This kind of design flaw could lead to a rug pull . Strong access control & decentralization are essential for keeping DeFi protocols secure
#Web3

[laksh @OxLakshay]

Started auditing the ThunderLoan project ⚡️ — a multi-contract system built around Aave’s protocol and flash loan mechanics. Diving into the architecture to analyze risks, spot vulnerabilities, and strengthen my DeFi security skills on real-world lending logic.
#Web3Security

[laksh @OxLakshay]

Wrapped up my TSwap audit . Learned how Uniswap V1’s AMM works under the hood, explored the importance of protocol invariants, and applied stateful fuzz testing to detect hidden bugs & validate core logic. Great experience combining math, testing, and security to strengthen DeFi

[laksh @OxLakshay]

Reviewed TSwap pool manually after invariant tests with Adreyn 🔍.
Built with Forge and found unused function parameters that broke the deposit logic .
Proof that even small issues can cause big failures in smart contracts 🚀
#Web3Security
thanks @PatrickAlphaC

[laksh @OxLakshay]

Developing a custom handler to test TSwap’s deposit function 🔧 — checking if transactions respect the AMM invariant x * y = k 🔄. Diving deep into tricky edge cases.
Would appreciate any insights or tips from the community 🙌🚀🔐
#Web3 #BlockchainCommunity

[laksh @OxLakshay]

Spent the past few days dissecting AMM formulas and TSwap project’s invariant logic . Focusing on fuzzing techniques to uncover hidden bugs in smart contracts. Building a stronger foundation in DeFi security, one concept at a time 🚀🔐
#Web3Security #Web3Community

[laksh @OxLakshay]

@JolacBox @cantinaxyz great

[laksh @OxLakshay]

Started auditing the TSwap Pool project as part of my Cyfrin security journey . Diving into AMMs, liquidity pools, and understanding how Uniswap mechanics work under the hood. Excited to explore vulnerabilities while leveling up my DeFi security skills. 🚀
thanks @CyfrinUpdraft

[laksh @OxLakshay]

Wrapped up a report on Weak Randomness 🔐🎲 — analyzed how insecure random generation in smart contracts can be exploited, explained impact, and shared mitigations.
thanks @CyfrinUpdraft @PatrickAlphaC
#Web3Community

[laksh @OxLakshay]

Just finished writing a Proof of Concept for a reentrancy attack 🔐💥. Built a ReentrancyAttacker contract to simulate how funds can be drained when external calls happen before state updates. Every PoC makes me better at spotting .
#Web3 #Security