great interview with @pashov, shows what's possible in a pretty short time if you are willing to grind it out, real inspiration https://t.co/CVDaaDdygi
1. Prompting research. Maybe hot take, but I think we’ve just reached the tip of the iceberg on the best ways to prompt language models. As language model capabilities increase, the degrees of freedom for guiding a particular generation via a good prompt will increase.
Been seeing independent security researchers hopping onto private audits rn
As @pashov said, the solo audit market is growing rapidly
so I thought of creating a collection of those audit reports
https://t.co/92JU7edn2q
Add any independent researcher's reports you know of
How to make your life easier while auditing smart contracts with VS Code?
Install Solidity Visual Developer extension!!!
When you audit a smart contract, visualisations can be very useful to understand it in high level. This extension provides a few.
Let's go through them 👇
An inflation attack is a widespread problem that targets the ERC-4626 tokenized vault standard and has largely gone unnoticed until recently.
To learn more about this type of attack and tips on protecting against it, read the article in the link below.
https://t.co/SGJCuPOkws
(1/6) 🚨Smart Contract Security Tip🚨
Suppose you are building a decentralized exchange and a user wants to place an order, you would want to calculate the gas costs and possible refunds to ensure that the user has enough funds to cover the transaction fees.
👇🧵
Establishing the perfect audit process is crucial to finding the most number of bugs in the least amount of time.🎯
Here are 6 tips I learnt that helped me to refine my audit process and find a total of 13 High/Medium issues in my first month of @code4rena ⚔️.
A thread 👇
As a smart contract auditor, knowing how to write tests in different frameworks (Foundry, Hardhat, Truffle) is valuable. That way, you can leverage test setups written by the protocol team and more easily write POC
I've had a lot of people as of late ask me how people find jobs in web3; specifically security researchers and developers, so I'm here to help. Jobs and work in general in web3 aren't posted on traditional boards, networking is the way 99% of people find their first gigs. 🧵1/6
My EVM guide is finally launching!
Learning EVM can get boring and painful if you just watch really long lectures or read a bunch of articles
Why not make it more fun with CTFs? While traditional CTFs require a lot of prereq knowledge, this guide assumes zero EVM background