bobface

running @onlypwner; hunting @immunefi; bug bounties, mev, dev;

[mk @m4k2_0x]

Finally reached the top alongside my teammates @DeFiHackLabs!

Big kudos to @bobface16 for creating @onlypwner and crafting some spicy challenges, especially JumpAndRun.

See ya!

[bogo @xb0g0]

🔥The amazing auditors that made it all possible🔥

*Part 1

@lonelysloth_sec, @bobface16, @zigtur, @J4X_Security, @0xEV_om, @cergyk1337, @akshaysrivastv, @kankodu, @gjaldon, @riproprip, @pkqs90, @DadeKuma, @EgisSec. @windhustler, @santipu_, @xuwinniexu, @Guhu95, @_blockian, @neumoXX, @GalloDaSballo, @bahurum, @__nnez, @0xadrii, @deliriusz_eth, @el_hajin, @rootedrescue, @merkle_bonsai, @n4nika_, @Trungore, @m4rio_eth,

[bogo @xb0g0]

💣 The MOTHER of ALL ALPHA is here. I officially present to you:

THE ART OF AUDITING

https://t.co/neS9lXdwrg

The first community-driven resource that consolidates thousands of hours of expertise from the sharpest minds in the industry.

I have spent the past 3 months scraping the leaderboards, collecting wisdom from some of the best in the game.

After nearly 80 DMs and countless inspiring conversations, the final product is here for everyone to explore and benefit from.

🔥 What’s inside?
Lessons from 52 top-performing, highly-respected auditors, including:
- Multi-million-dollar bounty hunters
- Multiple competition winners
- Leaders at the top of all-time rankings

📗 KNOWLEDGE THAT IS EVERLASTING
Over 2,500 years ago, Sun Tzu wrote The Art of War, and its lessons remain timeless.

Inspired by that legacy, we created The Art of Auditing - a resource designed to capture knowledge that stands the test of time.

Platforms will evolve, judging criteria will shift, and bugs will come and go—but the core principles outlined here will always hold true.

🧠 REAL VALUE FOR EVERYONE
The Art Of Auditing has the specific goal to deliver ALPHA and INSPIRATION to EVERYONE, even the TOP-tier auditors.That’s why every contributor is a proven expert with a stellar track record.

🛠️ NEVER ENDING PROJECT
I thought I could reach all the great auditors out there in one go, but it turned out there are too MANY of them and I am just ONE guy.

I'm not sure if I even covered 50%🤯

There’s still an immense wealth of knowledge waiting to be added to this project.

Every experienced auditor with achievements is INVITED to contribute to this collective knowledge base at ANY TIME.

💪 CREDITS
All credit and recognition go to the 52 incredible auditors who made this resource a reality.

Each of them committed to contributing and each of them DID. Despite this being one of the busiest periods in the industry, they gave their most precious resource - their time.

Having experienced it firsthand, I can confidently say that each one of them has extreme integrity and a deep sense of responsibility. If you plan to work with any of them, rest assured:

🫡 These auditors DELIVER

I'm tagging all the great names below👇

[bobface @bobface16]

Highly recommend you give it a try. But be warned, it's not for the faint of heart!

https://t.co/mgdhZcbFyR

[ONLYPWNER @onlypwner]

Jump n' Run has just been released. It's Saturday night, you know what you have to do! This one though.. I have a feeling that it will stand for a while.

https://t.co/UyA5YQ9fdd

[ONLYPWNER @onlypwner]

Jump n' Run has just been released. It's Saturday night, you know what you have to do! This one though.. I have a feeling that it will stand for a while.

https://t.co/UyA5YQ9fdd

[bobface @bobface16]

@StaniKulechov Would like to but not possible for non-premium X members.

[bobface @bobface16]

Ist es over für mich?

[bobface @bobface16]

@immunefi @lonelysloth_sec Grass is overrated

[Immunefi @immunefi]

Introducing Immunefi Profiles for the world’s most elite security researchers.🏅

Immunefi Profiles showcase your hard-earned, legendary achievements and badges. 💪

To create your own, log in to the Immunefi Dashboard (https://t.co/LfGzdYbf5i), just like @lonelysloth_sec did.

Profiles can be accessed at the following link structure: https://t.co/KTwY3WmT2N

They are currently available to ANY whitehat with one or more paid reports.

🧵

[bobface @bobface16]

Published my first tiny Rust library that lets you download and inspect known selectors from OpenChain (by @samczsun)

https://t.co/EybDLGfWii

[ONLYPWNER @onlypwner]

SEAL 911 just got released in time for the weekend, @3DOCsec's hardest challenge yet! Check it out below.
https://t.co/GMYaMW5jeq

[ONLYPWNER @onlypwner]

New challenge "Liquid Staking" by @3DOCsec just went live!
https://t.co/9UCuk6PQ1i

[bobface @bobface16]

Small tool to download Solidity source code from Etherscan-like APIS:
https://t.co/6x06akr9CM

[bobface @bobface16]

@infura_io Further info https://t.co/MJNM1pZnFR

[I'm Software 🦇🔊 @MatthewLilley]

ANY dApp which makes use of LedgerHQ/connect-kit is vulnerable. Don't use ANY dApps until further notice. This isn't a single isolated attack, it's a large-scale attack on multiple dApps.

[bobface @bobface16]

Leder connect-kit is compromised, loading obfuscated JS code to attempt a scam on the user. Avoid using the device until the situation is resolved.
@infura_io Disable the hardcoded key 9aa3d95b3bc440fa88ea12eaa4456161?
https://t.co/ctFsHMfyMH

[ONLYPWNER @onlypwner]

The weekend is coming, and we have a brand new challenge ready for you: Multisig!

https://t.co/OV809IrSpR

[ONLYPWNER @onlypwner]

A new challenge called "Proof of Work" by community member @3DOCsec has just been published.

Check it out below!
https://t.co/7bv5WBrjDT

[cergyk @cergyk1337]

Solved by no other than legend @bobface16 himself 😮! That was fast 👀

[cergyk @cergyk1337]

A small challenge for the end of the year! Will send a bounty of 0.2Ξ to the winner

Please share and have fun 😀
https://t.co/lC4OG3SK3E

[3DOↃ Security @3DOCsec]

@0xMlome got me hooked on this 👇 awesome collection of EVM CTF which I can't recommend enough 💛 https://t.co/fDXVWkMLd2 (@onlypwner) by @bobface16