There is a Telegram community that focuses on web3 security companies/researchers looking to capitalise on the economic incentives of this niche. Many people got a job or hired from here✌️
If you find this valuable, please like and retweet, so more people get value out of it🫡
Spent my first week bug hunting on @immunefi and uncovered 2 Highs and 1 Critical.
Unfortunately, they were deemed as Known Issues, having already been reported by other researchers.
Nevertheless, managed to uncover another High, for a good end to the day.🐛
Around a year ago I started web3sec and it changed my life.
My story.
I first learned about auditing and the world of web3sec in 2022 from @pashov's Bulgarian discord server.
At the time I was getting ready to change jobs and I was studying NodeJS hard, preparing a project, learning interview questions etc.
I saw that people were making good money from contests, but I didn't pay much attention to it as I was on a different path at that point, transitioning from a C# back-end dev to a full-stack dev with NodeJS/React.
I studied hard and worked harder, I prepared rigorously for 4 months, learned both Node and React from scratch, created a project and prepped for the interview.
Aiming high, I wanted to become a mid full-stack dev, even though I had 0 JS experience and 0 front-end experience, but after several rejections a company gave me a shot and they took me in.
Feeling extremely happy and fulfilled, I almost tripled my previous salary, the new company was filled with professionals with years of experience and the projects were interesting and new to me.
But, only after a few months I felt a void in me, because I achieved my goal, I got the job, so what was I supposed to do now?
That's when a friend from pashov's discord told me that a 16 year old Bulgarian kid made 5k from a contest on @code4rena. That kid was @KrisApost1.
I thought to myself: "If he can do it, why shouldn't I be able to do it?".
And so I started with Mastering Ethereum, then I learned Solidity from YouTube all in a span of a week. I did Ethernaut, and I aced it, after that and I was hooked, this was so much different from what I knew and it was a brave new world that I could be a part of.
After about a month of learning I jumped into my first contest and I felt like I was the man, like this was going to be easy, especially when I learned that the code was 2000 lines. I though to myself: "Pff, I've worked on codebases 50x that, this is going to be easy", it wasn't easy.
I didn't find anything, it didn't help that the protocol was an AMM, I didn't even know what an AMM was, later I found out that the contest had >40 H/M's found, you can imagine how bad I was.
After a month or two, I actually got a decent placement, I placed 4th on a @sherlockdefi contest and I felt amazing, again the ego got to me a bit. I thought I was the man again, thinking from now on I'll constantly place well on contests.
Getting second place on a @code4rena contest alongside @MartinMarchev and @0xSilvermist didn't help, because I was starting to believe in myself too much.
And so life does what it does best, it gives you a reality check.
For the next 5-6 months I placed horribly, barely making anything and barely placing. Then Q1 of 2024 happened, it was the worst time of my life. I was promoted to an "architect" at my job (yes during all this I still had my full time job), which meant I could spend less time auditing.
Those 3 months I barely slept, didn't eat well, my mind was all over the place, some negative things happened in my personal life and I was feeling very lost.
Then at the end of March, @nmirchev8 DMed me and asked if I wanted to team up for the long term. I needed to change something if I wanted to progress and my mind quickly went to what @BowTiedDravee once said in an interview, he managed to break through a plateau by teaming up with someone.
After 5 minutes of thinking I accepted and @EgisSec was born.
For the past ~4.5 months, we've participated in 15 contests and placed in Top3 11 times, and only once outside the Top10. We completed 7 private audits and earned >$120,000 from auditing.
I am not religious, but I do feel blessed. After so much hard work and so much failures I managed to pull myself together and start progressing again.
I am not a math genius, I never hacked anything in my life, I don't consider myself very creative, I am not special in any way, but I didn't give up, I just kept going.
I'm super excited to see where @EgisSec will go and I'm extremely grateful to @nmirchev8 for randomly hitting me up that day and offering me to team up.
Shoutout to everyone I've met along the way and special thanks to: @nmirchev8, @0xSilvermist, @arabadzhiev_, @MartinMarchev, @amarfares_, @zdravkohristov0, @radev_eth, @Slavcheww & @blckhv, @deadrosesxyz, @trachevgeorgi, @p_tsanev, @J4X_98, @xb0g0 and of course @pashov for showing me what's possible.
@andyfeili Grappling helps a ton. I have more experience in BJJ than in striking, so when I see that someone is a much better striker I try to them to the ground as fast as possible.
Choosing the right contests is crucial for success. I spend a lot of time researching before participating. I'm excited to share detailed "daily warden" threads about ongoing competitions.
Let's kickstart this journey! 🧵👇
Share if you're interested in frequent updates!