Arpeet Rathi 🇮🇳

Bug Hunter | Web3 Auditor

[Arpeet Rathi 🇮🇳 @RathiArpeet]

@yoursbyte @cantinaxyz 🤣💀

[Arpeet Rathi 🇮🇳 @RathiArpeet]

@Zyreon_trading @CertiKAlert dude, if they have to create it they would better implement rescueToken() kinda functions.

it’s like building a private door but it’s right in front and accessible by anyone.

[Arpeet Rathi 🇮🇳 @RathiArpeet]

@Dronewell @ANI govt job.

[Arpeet Rathi 🇮🇳 @RathiArpeet]

Hey @ContaboCom , how much time does it take to get the refund from your end. I remember earlier it got in just 1hour. Although now it hasn’t got in. Please take a look.

[0xaudron @0xaudron]

Completed a Solidity audit of @algoxentoken with @HackenProof covering ERC20, crowdsale, vesting, staking, and reward-claim logic. Solid build overall.

📄Audit report: https://t.co/ODKJwvjgTl

Thanks for the opportunity, @d0rsky

Helping protocols and infra ship securely — open for audits & security reviews 🚀

[HackenProof @HackenProof]

Welcome, @ValkyriSecurity 🤝

[0xaudron @0xaudron]

📢Currently, many firms and protocols are actively looking for DAML-focused auditors.

If you want to position yourself early in this niche, here’s a structured roadmap to become a strong DAML auditor and start getting booked faster:

1. Always start with the official docs:

- DAML official docs: https://t.co/M0fr8f24Ia
- Canton Network docs: https://t.co/fYlc3ydrdO

2. Refresh with writeups:

Great for understanding real-world attack surfaces and audit methodology.

- https://t.co/9LHhjvzko2
- https://t.co/BPHBf9s4Md
- https://t.co/lzzx22vIEd
- https://t.co/k0ItmD4nJ6

3. Read Real Audit Reports:

This is where most people level up.

- https://t.co/uQCET3sHiV
- https://t.co/Vgbsw5X6rA
- https://t.co/7Ga09sIRtc

Pro tip: Reproduce findings locally and try identifying additional edge cases the auditors missed

4. Learn the tools:

- daml-lint : Static analyzer
- daml-props : Property-based testing
- daml-verify : Formal verification

Kudos to @OpenZeppelin for creating tools.

The strongest auditor combines automated testing (including AI) alongside manual.

The DAML/Canton ecosystem is still early. If you consistently study docs, review audits, train your AI agent, and practice on live codebases, you’ll be ahead of most auditors entering the space.

📌Bookmark this thread if you're serious about DAML security.

[Arpeet Rathi 🇮🇳 @RathiArpeet]

requires strict look through @KotakBankLtd. Kindly resolve the issue, funds frozen and there is no way out!

Worst experience

[Prabhat @PrabhatKum12673]

3 months… my Kotak Bank account is frozen. Running from pillar to post, yet no help from the bank, no support from the police. This silence is exhausting and deeply frustratin.

@KotakBankLtd @RBI @FinMinIndia @DelhiPolice @CyberDost @RBI
@ANI @aajtak @PoliceRajasthan

[Arpeet Rathi 🇮🇳 @RathiArpeet]

Really disgusting experience. Kindly look into it @Olacabs

[Bozanzist @bonanzist]

Really disappointing experience with Ola. I was overcharged for my ride, raised a complaint, but no action has been taken so far. There’s no proper customer support helpline to even speak to someone. Already sent an email, but no response yet. Highly unprofessional @Olacabs

[Arpeet Rathi 🇮🇳 @RathiArpeet]

@Harshweb3india switching to plumbing

[omnipotent @omnipotentblock]

I set out to build this tool because the Web3 BD workflow is fundamentally broken.

The original vision for BD. INTEL was a powerhouse intelligence engine, fully loaded with premium security feeds to auto generate the perfect pitch.

But then reality hit: enterprise API costs are a massive.

But it still pulls its weight it maps out protocol data, scrapes their X and website, scores them on approachability, and writes pitch on free data

[Arpeet Rathi 🇮🇳 @RathiArpeet]

@omnipotentblock good analysis

[omnipotent @omnipotentblock]

To all the BD in web3, what's one major problem you're facing?

besides getting ghosted on telegram by a founder with an anime pfp who is "too busy" (playing league of legends).

safe space. vent below.

[Aashiieee @meowwcodes]

we (audit firm) are actually looking for intern for reach outs .

Pre-requisites: Have some knowledge about Web3 ecosystems and audit marketplace.

I already have a few people I know in mind, if you think you can do better ,DM me

[0xaudron @0xaudron]

https://t.co/SO7RYNCEg1

[Arpeet Rathi 🇮🇳 @RathiArpeet]

@omnipotentblock @S_N_SH_E_ ���

[0xaudron @0xaudron]

🚨RPC Security Lesson

Impact: It will lead to drainage of funds.

When deploying RPC node, make sure you never do this. Comment on what's wrong with this?

[omnipotent @omnipotentblock]

You saved $50k on an audit to lose $10M in the hack. That is an ROI of -20,000%. But hey, at least you launched on time. The hackers thank you for your donation. 📉

[Arpeet Rathi 🇮🇳 @RathiArpeet]

@omnipotentblock hahah, crazy bet

[0xaudron @0xaudron]

https://t.co/EbUsCQHSiY