leo.sec

Web3 security researcher. Offensive security.
Audits PM.

[leo.sec @leo_web3sec]

Starsarena's launch serves as a prime example of how not to do it. It's been a while since I've seen such basic and glaring vulnerabilities overlooked. 🚀🤦‍♂️ #Starsarena #Cybersecurity #audit

[leo.sec @leo_web3sec]

My typical project audit takes 1 week, and here's how the schedule usually looks:

It's all about ensuring the security and integrity of your project! #SecurityAudit #ProjectSafety #web3 #smartcontract

[leo.sec @leo_web3sec]

Just wrapped up 3 audits in September. It's surprising how many developers are still tripping up on basics like input validation, visibility issues, and math errors in their contracts. 🤦‍♂️💼

Always audit your projects!
#AuditSeason #SmartContracts #CryptoDev #web3 #security

[leo.sec @leo_web3sec]

I've been seeing a surge of 'solo web3 auditors' on Twitter lately. Are they really out there auditing, or just spinning tales of imagination? 🤔
#Web3 #Auditors #CryptoAudit

[leo.sec @leo_web3sec]

Still remember famous Java Rhino CVE-2011-3544 that was a pain for a web2.0 security

[leo.sec @leo_web3sec]

🔐 Flashback to the 2010s when Java and browser exploits ruled the cyber world! Who would've thought that a decade later, I'd be diving into the exciting world of #Web3? 🌐 The evolution of technology is mind-blowing! 🚀 #CyberSecurity #Web3Journey

[leo.sec @leo_web3sec]

If you are in Web3 security, consider Ziion Linux Distro by @halbornsecurity. It's Debian-based and comes with all the necessary tools preinstalled. A must for swift security environment deployment. #Web3Security #Ziion #linux #distro

[leo.sec @leo_web3sec]

$HCT Deflationary token with a public burn function was hacked at 30BNB loss, this vulnerability has been exploited by hackers for a long time.

Steps: flash loan -> swap -> burn -> sell tokens

BSC tx hash: 0x84bd77f25cc0db493c339a187c920f104a69f89053ab2deabb93c35220e6dfc0

[leo.sec @leo_web3sec]

@rovercrc probably my new coin 😅 just wait for a launch