mfosec

Bug bounty hunter | Bug bounty ölü yatırım tavsiyesidir

[mfosec @mfosec]

Same pattern. Critical, $132M at risk, 30 days unpatched, closed as "duplicate" of an unrelated lower-impact ticket. Mediation upheld today.

[Ziusz @Ziusz]

>find critical bug before upgrade goes live
>report it
>team fixes it immediately
>same report gets closed as OOS
>no mediation, no discussion, thread locked
>"thanks for securing the protocol, no bounty"
>upgrade bugs apparently must be found after they go live

[mfosec @mfosec]

@tcaybars001 Allahım kadrajda ki tüm aptal orospu çocuklarını yok et

[mfosec @mfosec]

@Parth0x108 @immunefi immunefi is the world's worst web3 sec platform

[mfosec @mfosec]

@uharfii ergenlige yeni adim atiyo kardesim

[mfosec @mfosec]

@immunefi @strata_markets fuck @immunefi 's mother

[mfosec @mfosec]

@immunefi @strata_markets i found many bugs here but cannot submisson my each findings twice validate strata past audit and solodit past audit api

[mfosec @mfosec]

If I can't submit the report, fuck the platform's mother.
#immunefi @immunefi

[mfosec @mfosec]

@immunefi Bug bounty is bullshit

[mfosec @mfosec]

@halimizduman0_0

[mfosec @mfosec]

@halimizduman0_0 Kızın birine ensen kanıyor diye pecete uzatmıştım 😭

[mfosec @mfosec]

@punto_haber Bu topoş a gülenler bundan daha aptal amk bunu sahneye çıkarıp mikrofon vereni sikiym

[mfosec @mfosec]

@goattucmpe @goodmugeceler cinsiyet değiştirmek için bahane arıyorsun gibime geldi

[mfosec @mfosec]

@immunefi orospucocugusunuz yaptiginiz isi sikim

[mfosec @mfosec]

@uharfii https://t.co/rOljvqgveC

[Yugusuguf Arşiv @videolarsivi]

sansar salvo şu telefonu aç

[mfosec @mfosec]

@uharfii gelir seni siker hayati bir sardiririm gorursun aq

[mfosec @mfosec]

@CyfrinUpdraft claude secenegini kaldirin burdan

[mfosec @mfosec]

@claudeai birdaha asla claude uyeligi almayacam orospucocuklari sizi modeller surekli racon kesiyor

[mfosec @mfosec]

@uharfii

[mfosec @mfosec]

@halimizduman0_0

[mfosec @mfosec]

@halimizduman0_0 @simsegimm

[pashov @pashov]

I started in web3 security by doing code4rena contests in 2022. I made $46.04 on my first one (Nibbl). Got lucky on the second one and made $926.63 (Illuminate) with ~6hrs of focused work.

I was hooked. I was already making close to $200k/yr base pay in my full-time job, and this was even better ROI on my time, insane.

A few months into this, I won my first contest. A Champion. 1st place, everyone else was behind me. Still, it was a small contest, made only $3561.22 (VTVL). This taught me that everything is possible in this space.

I started doing all contests and posted about it on X, then it found me - someone reached out to do an audit for him. "A solo audit?" I said - he nodded. $600 for 6 hours of work - DEAL.

After this, in a week I got another solo audit for $1500, which took me ~10hrs - even better. Felt awesome. I later got invited to work with OakSecurity and got paid $3000. I felt rich now.

Here I was all-in, spending all my awake time to study and learn, speak to other people, analyse opportunities, I wanted to grow and be better. Was finding more and more vulnerabilities.

Now, I joined Spearbit as an Associate Security Researcher position which I was proud of, with an advertised weekly rate of $6250. I don't think I ever ACTUALLY got paid that, but on paper, it looked cool.

More solo audits followed - got my first 5 figure deals and it was pure profit. I had a good stream of clients. It was a business. This is ~February 2024.

In the end of the year I launched a full-blown web3 security company, Pashov Audit Group. It was really about doing MORE of the good work, for more web3 projects. In 2.5yrs we did 500 audits so I guess that's that...

The big lesson in here is that you can start small, very small. Again, $46.04 dollars. I kept going. Added lots of zeroes to that number. Spoke to the right people and teamed up with them. Ignored the naysayers, kept going. I really kept going, still going.

Your time to decide now - will you keep going, or will you quit? Choose wisely🙏