tybik

smart contracts and security

[tybik @imtybik]

@zenhft what color theme is that?

[tybik @imtybik]

@TemitopeAkand01 @code4rena thanks you🙂✌️

[tybik @imtybik]

I received my first payout today on @code4rena

First award, first 4 digits, 1 confirmed Medium 🥳

I am just in shock that this is happening to me. It's the most incredible emotions. 🥹

[tybik @imtybik]

@hey_its_adven @code4rena thanks, buddy👍

[tybik @imtybik]

@beatsieboyz @code4rena thanks🤝

[tybik @imtybik]

@solthodox @code4rena thanks✌️

[tybik @imtybik]

@xAriextz @code4rena thanks, buddy✌️

[tybik @imtybik]

@opensensepw @code4rena thanks🤝

[tybik @imtybik]

@0xfrank_auditor @centrifuge @code4rena Congratulations! I'm right next to you, a line above ✌️

[tybik @imtybik]

@code4rena Thanks for the congratulations, thanks for the opportunities!🤝

[tybik @imtybik]

@ghosthunt1000 @14si20 Secureum roadmap is good, it has a lot of information. but I think it's better to practice more than to dive into theory

[tybik @imtybik]

1. Practice (⏳~27h):
All this week I have been auditing the centrifuge on @code4rena. The understanding of the protocol was getting better and better by the hour. I liked the codebase and the graphical explanation of the contracts. 1H 2M 1L (I hope they will be accepted😁)
👇👇

[tybik @imtybik]

@beatsieboyz Hi, excalidraw[.]com

[tybik @imtybik]

1/ Finished the Centrifuge audit on C4. I find a few problems. I will share the results later.
Took ~22h to understand the code base and find bugs.

I liked the code base, it was easy to understand and there weren't many dependencies.

Here are some helpful tips that have made:

[tybik @imtybik]

Flint is still ahead. But I don't stop. (@14si20)

[tybik @imtybik]

2. Learning/theory (⏳~11h):
🛡️Secureum:
- Solidity 201.
🛡️Common Web3 Security Issues (by @yAcademyDAO)
🛡️Weird ERC20 Tokens (gh: d-xo)
🛡️And a little bit about the differences of L2

[tybik @imtybik]

@0xT1MOH @RealJohnnyTime сырники :)

[tybik @imtybik]

@bytes032 Thanks for the support, buddy🤝

[tybik @imtybik]

4/ In this contest I tried the approach that is so often written about - it is to understand the protocol and only then go to the code base. This advice had only a positive impact. I recommend it.

What advice has had a positive impact on you? What is one that I should heed?

[tybik @imtybik]

3/ I noticed that I started to understand the code base only after a couple of hours. In the last contest, I was pointlessly running through the code trying to find vulnerabilities. As a result, I didn't understand anything and I didn't like the work.