blockDotAuditor

Blockchain Security Researcher 🔍 | My username? As unique as the bugs I hunt down!🐞 | Making Web3 safer, one block at a time 🛡️ | DM for collabs 🤝

[blockDotAuditor @blockDotAuditor]

500-day @duolingo streak 🔥✌🔥

Der, die, das ≡ my eternal enemies 💀🇩🇪

#Duolingo #Germanlearning

[pashov @pashov]

1% daily improvement leads to 37x growth in a single year.

Don't fade compound growth - show up daily, pay the price, do the work. It's what I did so far and I will continue doing it🫡

[Slavcheww @Slavcheww]

Can’t juggle two jobs and want to commit to Web3 fully?

Do this for 3–4 months:

1. Start audit contests 🧠

2. Go all in — not “2–3 hours on weekends,”
I mean every spare hour you can put in.

3. When the report drops, read it like it’s your bible. Study every finding, every PoC, every detail.

4. Repeat. Again and again.

If that doesn’t change your results…
Ping me.

[0xGondar @0xGondarxyz]

The biggest myth? "I need more courses." Nah. Audit 5,000 lines of code. Miss 20 bugs. Then you’ll learn. Theory without pain teaches nothing.

[pashov @pashov]

You want to make friends (or "network") in crypto & web3?

A.B.H. Always Be Helping. Do it for just 6 months, no excuses - you'll change your environment completely🫡

[pashov @pashov]

Stop just admiring the people who crush it in web3

Start studying what they made them successful instead

Studying is the #1 activity for a self-development addict

[JohnnyTime 🤓🔥 @RealJohnnyTime]

Smart contract auditing is 50% hacking, 50% research.

You’ll spend HOURS digging into:
📜 Old EIPs
📚 Protocol whitepapers
⚡ Solidity changelogs

If reading bores you, this field isn’t for you.

[blockDotAuditor @blockDotAuditor]

Patrick Collins got me into crypto.

Thank you, @PatrickAlphaC

[Patrick Collins @PatrickAlphaC]

Chainlink and Ethereum got me into crypto.

Thank you, Chainlink and Ethereum.

[Yotov @yotov721]

If your project does NOT have unit tests it is definetly NOT ready for an Audit.

If you are thinking that just an audit will solvo all your security concerns, you are setting up for failiure.

I've uncovered multiple issues while writtin unit tests. Writting unit tests is the dev team's job, not the security researchers's.

[blockDotAuditor @blockDotAuditor]

Success lies in a simple questions......

[Arsen @arsen_bt]

The fastest way to exploit the system is to know it by heart

Open the Notion and write your answers to these 4 questions:

1. What project does, step by step?
2. What are key functionalities, how it works?
3. Are there known bugs with this type of protocol?
4. What invariants the protocol has?

Success lies in a simple questions.

Well prepared system of understanding any protocol.

It leads to the bugs being found.

[blockDotAuditor @blockDotAuditor]

@0xkmmm @cantinaxyz congrats.

[Pashov Audit Group @PashovAuditGrp]

Our security audit process is >95% perfect. Very scalable, both collaborative and competitive, just the right amount of auditors and experiences and unbiasedness.

Still trying to improve the last 5%, we want it 100% perfect🫡

[ddimitrov22 @ddimitrovv22]

Protocols that you should study before building anything or starting auditing:

- AAVE v3
- Compound v2
- Uniswap v2 & v3

With over 1000 forks and a TVL of more than $10B, there is a lot to learn from them. Study the code and all the concepts and it will serve you well.

[blockDotAuditor @blockDotAuditor]

no degrees needed at all !!!

[Param @Param_eth]

In web3, you can build your career without certificates or degrees.

Choose a niche and dive deep.

[Patrick Collins @PatrickAlphaC]

It’s really depressing to see posts like this.

We as an industry have pushed under the rug calldata verification because “we just want to get people on the door”.

But that needs to end now.

You either understand your transactions, or you use a wallet that will help you understand.

Using a wallet that doesn’t help you understand should soon be considered as worthless as using a wallet that exposes your private key.

[pashov @pashov]

Anybody in web3 security that doesn't understand that helping everyone around him will grow the overall quality of security services, which will help builders build more stuff, which will help increase demand of audits, which will help YOU, is not smart enough.

HELP EACH OTHER🫡

[pashov @pashov]

Safe path to $10k/month in crypto (REAL)

1. Study web3 security (Cyfrin Updraft courses)
2. Start doing security contests, put big efforts, start winning (takes a few months if you're a hustler)
3. Get invited to do freelance audits on the side

The only way to fail is to quit🫡

[blockDotAuditor @blockDotAuditor]

great everyone should be taking this

[Cyfrin Updraft 🟩 @CyfrinUpdraft]

Learn to safely interact with smart contracts and verify transactions 🔐

Web3 Wallet Security Basics is live on Updraft 🚀

An entry level course to learn:
- Foundational blockchain wallet security
- Elementary transaction verification

And help you avoid disaster.

👇

[blockDotAuditor @blockDotAuditor]

@0xOwenThurm 😭

[Owen | Guardian @0xOwenThurm]

How it started:

8 billion people on 10 chains

vs how it’s going:

10 people on 8 billion chains