0xmoo

I fuzz code DM me

[pashov @pashov]

People will hear "rest is good, rest is essential" and take full 3 weeks off

Just admit you are lazy, no need to be philosophical about it🙏

[pashov @pashov]

The Solana ecosystem is growing and I project Solana Security Audits demand will grow >30% for many in 2026. Great time to learn Rust auditing.

Here is your latest and greatest resource on this, start digging. Great Job, @0xhuy0512 🫡
https://t.co/NY6z5aZODf

[pashov @pashov]

How do you learn to find vulnerabilities in Rust code?

Read audit reports. Here is a list of the usual go-to auditing company for Rust codebases - @osec_io. Even I myself once applied to join them as an auditor. A MUST read for future great security researchers👇

[chrisdior @chrisdior777]

Most people underestimate how long it takes to become good in Web3 security.

Yes, there are exceptions. But most can’t process large amounts of complex information fast.

For most, reaching an intermediate level takes between 1-3 years. Going from 0 to elite in 1 year is rare.

[0xmoo @moustafaezz11]

@PatrickAlphaC is Cyfrin cooking any sui move tutorials

[pashov @pashov]

Sometimes the smartest people think they are the dumbest. Very big mistake, especially in web3 security.

When it comes to asking questions to developers, you should always do it for best performance. You can't ask a dumb question when you are auditing a web3 smart contract for some complex derivatives decentralised exchange.

Just read the last sentence again. You are doing genius sorcery work and you think you are not smart? Think again.

Maximize your performance - get deep insight into the project, let the devs speak. Again, this has another side - do not directly start with this IMO, as it can bias you towards dev-thinking. You need blackhat-thinking. But you need to understand the protocol first.

Don't think you are dumb. It's a mid-curve thing. If you are in web3 security you are VERY smart.

[pashov @pashov]

The only way to find alpha is to follow your personal curiosity. There is no algorithm for it - it wouldn't be "alpha" otherwise.

This applies for security research, novel/rare vulnerabilities, job/freelance opportunities and business itself. Use this knowledge. Today.

[0xmoo @moustafaezz11]

@PatrickAlphaC Great stuff. Is the algorithm trading material in the advanced course?

[0xmoo @moustafaezz11]

@GalloDaSballo I'm interested

[0xmoo @moustafaezz11]

@pashov I hope I win

[pashov @pashov]

Since its launch a year ago, my web3 security company has both paid out to security researchers & profited >$1,000,000 USD. Secured Aave, Uniswap, LayerZero, Ethena.

We are celebrating with a giveaway. You need to like, retweet & comment. 4 winners, $500 each, 48hrs. Good luck🫡

[0xmoo @moustafaezz11]

MakerDAO is now Sky! Get ready to upgrade to $USDS and $SKY on 18 Sept.
Just signed up for the Early Bird Bonus on https://t.co/i934DkshA5.
Get double rewards for the first month after launch if you're eligible @SkyEcosystem

[0xmoo @moustafaezz11]

@PatrickAlphaC Would be great if you made a video for the non tech crypto user on how to use such wallets

[0xmoo @moustafaezz11]

Are there evm account abstraction wallets at the moment?

[0xmoo @moustafaezz11]

@pashov 🫡

[0xmoo @moustafaezz11]

I just completed the @cyfrin Puppy Raffle 🐶 Audit from the Ultimate Security Course.

Thanks @patrickalphac!

[0xmoo @moustafaezz11]

@CyfrinUpdraft is your website down?

[0xmoo @moustafaezz11]

I just submitted my response to a DeForm!

https://t.co/0S3ijNCUrM

[pashov @pashov]

I made $500 and am donating it to a random person who retweets this and comments below✌️

Found an issue related to using `ERC20::approve` - it always reverts with USDT on Ethereum mainnet (no `bool` returned). Use `SafeERC20`'s `forceApprove` method by OpenZeppelin instead🫡