Salafiy.eth

Salafy/Athary/GDSC Lead 22/23/Security Researcher/ Developer Advocate/Tech Evangelist/Web3 and Blockchain Enthusiast

[chrisdior @chrisdior777]

💰🚨 $1.4M from Web3 bug bounties in 2026!

Meet @0xvivekd and learn about his journey, mindset, AI workflow, and the lessons he's learned along the way.

Part 1: The Journey

- Vivek didn't come from a software engineering background.

- He was a Chartered Accountant (licensed financial and tax professional) running his own firm.

- In 2021, a friend who traded crypto came to him for help filing taxes. That's how he got introduced to crypto and started investing, mainly participating in IDOs (Initial DEX Offerings).

- When the bear market arrived, he didn't leave the industry. He pivoted into data analysis.

- Then in 2023, as the market became active again, he started airdrop farming.

- In June 2024, he entered Web3 security through public audit contests.

- The next 15 months were difficult.

- He kept participating in contests but struggled to achieve consistent results.

- Around August/September 2025, he made a decision that completely changed his career.

- He switched from public audit contests to bug bounties.

Today, he has earned over $1.3M in bug bounties in 2026 alone, including another $250,000 critical bounty announced yesterday.

Part 2: The Mindset

- "Bug bounties are not difficult in the technical sense. They are difficult from a psychological point of view."

- He explained what led him to leave audit contests:

- During a White Hat Mastermind, everyone was asked what they were working on.

- Around half of the researchers were working on the contest with the smallest scope and the lowest payout.

- Vivek realized he was always choosing the easiest targets because they offered the fastest and most predictable payouts.

- Bug bounties were different. There was no guarantee of finding anything. No guaranteed payout. Sometimes weeks of work could lead to nothing.

- That was exactly why he switched.

- As he put it:
"Bug bounty hunters are paid handsomely for dealing with uncertainty."

Part 3: AI

- AI has completely changed Vivek's workflow.

- Today, he gives AI a target while he spends that same time building a high-level understanding of the protocol.

- Once AI surfaces potential issues, he validates them, removes false positives, and determines whether they're actually valid vulnerabilities.

- His estimate surprised me.
Today, around 70-80% of the issues are initially surfaced by AI.

- But he doesn't believe AI will replace security researchers. His reasoning is simple.

- AI is excellent at spotting unusual behavior. It still struggles to understand intended behavior. That's why human validation remains essential.

- He also believes the learning process has changed.

- Reading audit reports and recent hacks is still fundamental, but today researchers should also follow AI developments and continuously experiment with AI tools.

Part 4: Advice

- According to Vivek, DISCIPLINE is what separates the best researchers from everyone else.

- His advice was straightforward:
Don't expect meaningful results during your first 12 months. Focus on the inputs, not the outputs. Don't compare yourself to researchers who have been building their skills for years. Stay disciplined. Don't chase shiny objects. Keep adapting as the industry evolves.

- One detail I really liked was how he dealt with difficult periods.

- Whenever he went through a dry spell, he listened to podcasts from other top white hats.

- Not because they never struggled. But because they did.

- It reminded him that even the best researchers experience periods without finding bugs.

Congratulations on the incredible journey! @0xvivekd. 👏

[Salafiy.eth @Siddeeq_Tech]

@coffiasse Hahhaha
Good luck

[Abu Jabir Penabdul @PenAbdull]

Among the misconceptions of man is his belief that multiple income streams guarantee financial stability and sustainability. Little does he know that true financial security is divinely granted latched by Allah’s blessings, and it is attained through honesty, sincerity, and truthfulness in one’s dealings.

[IQ 400 | Dr. CryptoSniperlord LordCrypto @LordCrypto_]

THE TEAM OF $SANUSI CORDINATED THE RUG?🚨🤔 - My Submission From the Space!!

I Recorded Part of the Last Minutes of the Space and Here is my Submmission!!

A team member said Solanaburner was created in 2024 - this was the exact statement of a team member!!

Mhen Now I’m fully in for an Angelic Analysis!

[Sunusi Danjuma Ali @SunusiMinjibir]

Assalamu Alaikum.

I would like to express my sincere regret over what happened today with the $SUNUSI token.

What happened?

When we launched $SUNUSI, I can confidently say it started on a strong note. In less than five days, the project reached an all-time high market cap of $3.7 million.

As expected, some early holders began taking profits, which caused the price to decline. The market cap eventually dropped from $3.7M to around $440k.

To address the situation, I made a post on X seeking support from the Solana ecosystem, including @solana and @a1lon9, the founder of https://t.co/2DJdNgdiuM.

Following that, I received advice from several experienced blockchain professionals. They told me that $SUNUSI had achieved something remarkable in a very short time and was now attracting the attention of major investors.

However, they also pointed out one major concern: the 48% token supply held in my wallet.

From an investor’s perspective, such a large allocation in a single wallet represents a significant risk, as they may fear a future dump.

Several solutions were suggested:

Lock the tokens for several years to build investor confidence. Burn part of the allocation and lock the remaining balance.

After discussing the options with the $SUNUSI team, we decided to burn half of the allocation and lock most of the remaining half. We scheduled the burn for around 12:30 PM today.

The burn process

There are generally two methods of burning tokens.

The first is sending tokens to a dead wallet. While the tokens become inaccessible, they still technically exist on-chain, so this doesn’t reduce the total supply.

The second method uses a dedicated burn protocol, which permanently destroys the tokens and reduces the total supply. This is often viewed more positively because it genuinely decreases supply. We choose the following burning protocol for the exercise.

https://t.co/yS88fzFR1l

After testing the protocol successfully yesterday with another wallet, we decided to use that method. Below is the link to the test we carried out.

https://t.co/k4iYWgK0hi

What went wrong

At approximately 12:30 PM today, I connected my wallet to the burn protocol and initiated a transaction to burn over 24 million plus $SUNUSI tokens.

After approving the transaction, the token price briefly moved upward. Within minutes, however, it began dumping.

When we checked the blockchain, we discovered something was terribly wrong.

Instead of burning 24 million plus tokens, only about 242,258 $SUNUSI had been burned. Below is the onchain link of the burning exercise.

https://t.co/b3KkF4DR3p

The remaining tokens had been transferred to another wallet, which immediately started selling them.

In the confusion, some people suggested burning the remaining tokens to help stabilize the market.

Before attempting another large burn, I decided to test with just 10,000 $SUNUSI.

The moment I approved that transaction, everything in my wallet was drained, not just the remaining $SUNUSI, but also other assets including SOL, ANSEM, and other tokens.

Moving forward

This is undoubtedly one of the toughest challenges I’ve faced.

But I believe every trial comes from Allah, and this is one we must accept with patience.

Allah knows our intentions were sincere. We didn’t create $SUNUSI simply to make money. Our goal was to build something valuable for the community and create opportunities for others.

I won’t pretend this hasn’t been painful. It has been heartbreaking.

However, after receiving countless phone calls, messages, prayers, and words of encouragement from family, friends, and community members, I’ve accepted this as a test from Allah.

This setback will not break our spirit.

We will not give up.

Every meaningful success comes with challenges, and we remain committed to moving forward.

In Sha Allah, I will host an X Space tomorrow to explain everything in greater detail, answer questions, and discuss the next steps with the community.

[Salafiy.eth @Siddeeq_Tech]

@maigadohcrypto Congratulations Sir

[Salafiy.eth @Siddeeq_Tech]

*عيدكم مباركك*
*تقبل الله منا و منكم*

[Patrick Collins @PatrickAlphaC]

For those looking to get their non-tech friends into web3, this is for you!

Shout out to @0xjesstech for all the hard work she put into this!!!

[Cyfrin Updraft 🟩 @CyfrinUpdraft]

Every transaction on Ethereum costs gas. But most new devs don't understand what gas actually measures or why their transaction fees spike randomly.

Here's how it actually works. 🧵

[Cyfrin Updraft 🟩 @CyfrinUpdraft]

Most beginners watch tutorials passively and wonder why nothing sticks.

The way you set up your learning environment matters more than which tutorial you pick. 🧵

[pashov @pashov]

If I was just starting out as a security researcher in web3, I would've been learning the following, in this order:

1. Solidity & EVM
2. Hacking smart contracts, replaying exploits
3. AI - building Skills, utilising agents
4. Practice on every possible occasion

Good luck🫡

[Cyfrin Updraft 🟩 @CyfrinUpdraft]

If you're learning Solidity in 2026 and haven't tried Foundry yet, you might be making things harder for yourself. 🤔

Here's why Foundry is becoming the default development framework for serious Solidity developers.

🧵

[Cyfrin Updraft 🟩 @CyfrinUpdraft]

"Is it too late to break into web3 development?"

Entry-level blockchain developer salaries are averaging ~$100K/year in 2026. Blockchain job postings grew ~45% in 2025.

The market has never been more accessible for new developers. But, what’s actually getting people hired? 🧵

[IT Guy @T3chFalcon]

Just came across this CV😭

[Cyfrin Updraft 🟩 @CyfrinUpdraft]

You've watched 20 hours of blockchain courses. 📺

Built 0 projects.

Here's the problem. 👇

[Cyfrin Updraft 🟩 @CyfrinUpdraft]

🚨 Applications opening soon 🚨

We’re recruiting the next cohort of Ambassadors for Cyfrin & Updraft.

If you love building community, hosting events, and getting people excited about smart-contract security — this one’s for you.

📆 Applications open Feb 01

Stay tuned 👀

[Salafiy.eth @Siddeeq_Tech]

I’m happy to announce that I’ve officially passed my Certified Cyber Security Professional Educator (CCEP) exam!
Big shoutout to @Mr_Abdul05 for supporting me with the resources you’re highly appreciated, bro JazakumulLahu khaira.
This is just the beginning. More wins!

[Salafiy.eth @Siddeeq_Tech]

Out to preach the Gospel
#DevfestKano
@gdgkano
@gdgbauchi

[PeterSR @PeterSRWeb3]

I'm sharing you now, TOP resources to kickstart your journey with rust and solana! 🔝

1. An introduction to developing on solana https://t.co/2fDsVh0KFM

2. Beginners guide to building solana programs https://t.co/vAmUr9MUAz

3. Introduction to anchor https://t.co/zTcWYjcIku

[0xSlowbug 🥷 @0xSlowbug]

Been having a lot of questions about road map and how to learn web3 security.

On this thread I’ll be sharing every resource I have used. I’ll simplify it so you’d work with it in steps.

Follow the roadmap sequentially don’t skip any course!

#1