mau 🇧🇷

blockchain builder

[mau 🇧🇷 @maueth_]

🧵Beginner Auditors show difficulties in understanding the code base😡

It is often difficult to get into a flow where ideas and learning come naturally

I have been using this framework which helps me to shorten the learning curve on the protocol code base

Are you ready ?

[mau 🇧🇷 @maueth_]

@JustinPBarnett I’m interested ❤️

[mau 🇧🇷 @maueth_]

Do you know what the ERC-4337 specification is ?

Below is the Introduction to this content 🚀

https://t.co/V8bu3ZTNOz

[mau 🇧🇷 @maueth_]

👋 I'm working on a project as a solidity developer for a multisig wallet following the ERC-4337 specification.

I decided to share what I've been learning about the specification and how it can help you in your audit.

https://t.co/V8bu3ZTNOz

[Owen | Guardian @0xOwenThurm]

The outlook on security researcher Twitter lately has been bleak.

Many folks pontificating that opportunity has been replaced by competition.

Let's talk about it.

Yes, In 2023 there have been more entrants into the realm of Smart Contract security than ever before.

Does this fundamentally mean that competition has increased in the space? Yes.

Does this mean that competition has increased for you?

Only if you enter the same race as everyone else.

97% of people will enter this space seeking results in 6 months or less.

If you too act in accordance with the expectation of results in 6 months, you are competing with 97% of people.

However, if you adopt a multi-year timeframe you will see that competition is scant.

Take actions that don't make sense on a 6-month timescale, but reap massive benefits over a 3-year, 4-year, 5-year period.

• Spend 6 weeks on a single review
• Audit & produce reports for free
• Spend 20 hours a week sharing what you've learned
• Do anything you can to work with those ahead of you
• Building a brand > Doing the next review

This takes years to pay off.

If you carry out massive action on long-term oriented goals over a multi-year time period, you will find that the 1000s you perceived as competition were really just 5-6 folks -- and there's actually more than enough market share to go around.

Furthermore, is the opportunity gone?

Virtually every proposed use case for blockchain technology relies on or is tangentially related to Smart Contracts.

If you believe blockchain technology will see mass adoption, then you must also concede that Smart Contract security will see an unfathomable increase in demand.

Can 150 security researchers hold up a global financial system?

No.

Perhaps 1,500? 15,000? 150,000???

Take a longer time horizon bet, and stick to it.

Position yourself for 3 years from now.

[mau 🇧🇷 @maueth_]

@namx05 you should be proud of your week 👏
it's hard to study/work full time and still dedicate hours of your day to smart contract security

our journey as beginner smart contract auditors is a marathon, not a 100m sprint 😉

[naman @namx05]

Inspired with @0xOndrejJuda and @maueth_, I started tracking my time.

Making a 🧵to manage it in one place (:

[mau 🇧🇷 @maueth_]

@TokensoftInc @sherlockdefi preliminary 🎉
let's wait for the final result

I submitted only one medium risk issue

[mau 🇧🇷 @maueth_]

@ShieldifyMartin 8 hours a day 🤣

[mau 🇧🇷 @maueth_]

@0xOndrejJuda thanks 🚀

[mau 🇧🇷 @maueth_]

Two Principles I've invested in the last months 🦅

It's a marathon not a 100 meter sprint 🏃
Consistency is the 🔑

Working full time as a software engineer and dedicating hours of my day to smart contract security is not an easy task

[mau 🇧🇷 @maueth_]

@namx05 Yes, that’s the one 😊

[mau 🇧🇷 @maueth_]

@PaulRBerg I can't drink coffee or anything related to caffeine instead I eat apples and drink cold water

[mau 🇧🇷 @maueth_]

Two Principles I've invested in the last months 🦅

It's a marathon not a 100 meter sprint 🏃
Consistency is the 🔑

Working full time as a software engineer and dedicating hours of my day to smart contract security is not an easy task

[mau 🇧🇷 @maueth_]

@0xblackskull really nice content👏
finally out of my bookmarks 😂

thanks for sharing

[mau 🇧🇷 @maueth_]

@KKat7531 thanks for sharing 👏

[mau 🇧🇷 @maueth_]

@BowTiedDravee @BowTiedDravee how do you apply these POVs concepts in ur daily auditing routine ?

[mau 🇧🇷 @maueth_]

@0xblackskull @shanzson nice reading 👏

[mau 🇧🇷 @maueth_]

@francecarlucci @0xblackskull @shanzson whats the name of the book ?
could you provide the url ?

[mau 🇧🇷 @maueth_]

@BowTiedDravee @PaulRBerg this is huge 👏
really good practice to implement remembers me a lot about web2 clean code techniques

for sure I will apply in next solidity feature 🚀

nice work @PaulRBerg and thanks for sharing @BowTiedDravee

[mau 🇧🇷 @maueth_]

@nisedo_ it calls Toggl Track there is a web version as well

[mau 🇧🇷 @maueth_]

@0xblackskull Nice chart