Andrea | Blockchain Security 🏖️ 💻

Wellhead Engineer turned into Android Dev.
Now turned into Blockchain Security. Focus on Rust language audit.

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

Happy new year 2026

* Get first Med/High by Mar 2026
* Rank top 10 in one of the contest by end of this year

I solemnly pledged, no quit

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

Wrap up @Morpho today. Start grinding dreeApp on @sherlockdefi

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

Immediately sing eminem

[SHERLOCK @sherlockdefi]

The DRE App audit contest is now live!

Sherlock researchers can review dreUSD core contracts, with up to $60,000 USDC available through conditional rewards.

Jump in here 👇
https://t.co/FcX1GZp3ec

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

Continue examining @Morpho the periphery section. Up to this part, I am almost convinced that there is no high vulnerability here. And finding medium need tons of luck.

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

Still grinding @Morpho midnight. Though it was said to be solid as my country's hope. Let's just keep grinding until finished with the intention to sharpen my skill.

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

@jopantechh Semangat

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

There's plenty of chaos in Web3 this year alone, especially in security. My focus is simple: keep sharpening my skills until I'm capable of making a meaningful impact.

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

Still looking into the entry function for @Morpho, but I'm struggling to understand the protocol's core design and flow from the code alone.

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

Starting to dive into @Morpho midnight contest.

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

More SR is needed!

[Immunefi @immunefi]

Here’s a list of all crypto protocols hacked this year. It’s only May.

Stake DAO
WUSD fi/Glov
Gnosis Users
Fractal Protocol
StablR
Mure
Polymarket
MAP Protocol
RetoSwap
HermesVault
Bankr
Echo Bridge
SEA Token
Verus-Ethereum Bridge
Adshares
Thorchain DEX
Transit Finance
Aurellion
SQ Protocol
INK Finance
Renegade
TrustedVolumes
Ekubo
SmartCredit
Sharwa Finance
Bisq
Wasabi Perps
Aftermath Perps
Sweat Foundation
Syndicate
Quant
JUDAO
Singularity Finance
ZetaChain
Scallop Lend
Litecoin
Purrlend
Giddy
Kipseli
Volo Vault
Thetanuts Finance
Juicebox V3
Kelp
Grinex
Rhea Lend
Zerion Wallet
MONA
Dango
SubQuery Network
Hyperbridge
Aethir
BSC TMM/USDT
Drift Trade
LML/USDT staking protocol
GoonFi
Cyrus Finance
Resolv
Neutrl
dTRINITY dLEND
Venus Core Pool
Goose Finance
Aave V3
Gondi V3
Molt EVM
SolvBTC
Curve LlamaLend
FOOM Cash
Wise Lending V2
Ploutos Money
DGLD
Blend Pools V2
IoTeX
Veil Cash
Moonwell Lending
CrossCurve
Step Finance
Revert Lend
Matcha
Aperture LM
Saga
Makina
Meteora DAMM V2
YO Protocol
Truebit
Polycule
Fusion by IPOR
TMX TRIBE
PRXVT

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

Wrap up k2 audit today. Spend 2 days trying to abuse the flashloan operation, but failed. Fingercross now and take a break.

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

A nice first flight arena for solana

[0xFrankCastle🦀 @0xcastle_chain]

🏆 Solana Audit Arena — Special Week 4 results are OUT

Thanks @NotDeGhost for sponsoring this week.

30 valid findings. 69 points. 1 Critical 🔪

🥇 @kyan_novoyd — 25 pts → $500 💰
🥈 @faruukku — 17 pts (1C + 1H 🐐) → $300 💰
🥉 @mylifechangefa1 — 9 pts → $200 💰

GG to every researcher who shipped 🫡

[A3R4H4M @abrahamonchain]

What Smart Contract Security Research Really Is

Most people think blockchain security is just “checking code for bugs.”

It isn’t.

Smart contract security research is psychological warfare against invisible adversaries.

A smart contract security researcher studies decentralized systems the same way a thief studies a bank vault.

The job is to think like an attacker before attackers arrive.

To identify weaknesses before they become headlines.

To understand how complex financial systems break under pressure, manipulation, and human assumptions.

In Web3, code is law.

And unlike traditional software, smart contracts often control real money directly.

No customer support.

No chargebacks.

No emergency rollback button.

One vulnerability can drain millions of dollars in seconds.

That’s why smart contract auditing has become one of the most critical disciplines in blockchain cybersecurity.

Every DeFi protocol, governance system, bridge, staking platform, and DAO depends on security researchers seeing what everyone else missed.

Sometimes that means catching catastrophic flaws before launch.

Sometimes it means watching exploits happen in real time and realizing nobody can stop them.

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

After months of auditing, I rarely touched liquidation logic—it's long, complex, and intimidating for beginners.
But in every contest results, liquidation operations are always where most bugs are found.
So for K2, I'm biting the bullet and grinding through liquidation. 💪

[JohnnyTime 🤓🔥 @RealJohnnyTime]

New: We just launched the BEST Web3 opportunities page! Bug bounties & Audit competitions aggregated all in one place in a beautiful customizable UI. Check it out here: https://t.co/9VSMTuk0c2

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

Audit update. Nothing new, continue grinding K2 for flash liquidation. It has been almost a month grinding K2, with only 3 days short break for Solana Audit Arena.

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

When I just learned the basic audit, I keep hearing "security results are not linear". Now I truly understand the meaning

[Phoenixx @Phoenixx_xyz]

Oh, forgot to tag @0xShaedyW

Full dataset:

https://t.co/zZydxK9npx

[Lookonchain @lookonchain]

Three major hacks in just 4 days!

On May 15, #THORChain was exploited, with stolen funds exceeding $10M.

On May 18, the Verus-Ethereum Bridge (@VerusCoin) was hacked, with ~$11.5M stolen.

Today, @EchoProtocol_ was exploited, the hacker minted 1,000 $eBTC ($76.64M) and has already used it to steal 385 $ETH($821K).

Stay safe.

[Lookonchain @lookonchain]

Crazy — another hack just happened!

According to @dcfgod, @EchoProtocol_ on Monad was exploited.

The hacker:
minted 1,000 $eBTC ($76.64M) on Monad;
deposited 45 $eBTC ($3.45M) into Curvance;
borrowed 11.3 $WBTC ($867K) from Curvance;
bridged the 11.3 $WBTC to Ethereum and swapped it for 385 $ETH ($821K);
then deposited the 385 $ETH into Tornado Cash to launder the funds.

The hacker still holds 955 $eBTC ($73.2M).

https://t.co/iswmvC0Gk1

[Andrea | Blockchain Security 🏖️ 💻 @snufflesrea]

Continuing k2 audit today. Today for price oracle and internal liquidation. Tomorrow will be the 2 step liquidation.

Having a nice zen moment yesterday with Ikea coffee & almond cake.