Xiaoming90

Founding Security Researcher @blackthornxyz | Lead Senior Watson @sherlockdefi | Security Researcher @SpearbitDAO | Portfolio:

[Xiaoming90 @xiaoming90]

After more than a year of competing in Sherlock, I have finally achieved #1 on the leaderboard. I'm looking forward to competing in more contests, contributing to the security of more protocols, and continuing to learn from the many great auditors out there.

[Blackthorn @blackthornxyz]

Blackthorn takes this further.

We reserve Sherlock’s highest-tier auditors for the codebases where only the best reviewers should be in the room.

For the highest-stakes launches, Blackthorn assembles exclusive audit teams from the strongest performers across Sherlock’s 11,000+ researcher network.

[Xiaoming90 @xiaoming90]

Honored to be selected as an ETHSecurity Badge holder among such an incredible group of talented people in the security space. Will continue to work hard to make Ethereum safer!

[thedao.fund @thedaofund]

The final 100 ETHSecurity Badge holders are in!

That brings us to 200 security experts, guiding how TheDAO allocates its funds and also coordinating behind the scenes to make Ethereum safer.

Big thanks to everyone who engaged with the process and helped shape it, and to @bonfiresai for building the tooling that made it possible.

[Xiaoming90 @xiaoming90]

Glad to have secured 1st place in the Fluid V2 contest. Managed to find all H/M issues in the contest. Thanks to @0xfluid and @sherlockdefi for the opportunity!

[Xiaoming90 @xiaoming90]

Looking forward 🙂

[SHERLOCK @sherlockdefi]

🏆 @allbridge_io Audit Contest Results 🏆

Congrats to:
1. @Alicrali333, @EgisSec, @VeerendraVamshi, @X0sauce, @xiaoming90, BobbyAudit - $700 🥇
2. 0xloophole, @0xdemonnn, @0xomeiza, @MishkatM80976, Emine, Hurricane, MysteryAuditor, WillyCode20 - $549 🥈

$19,000 rewards ➡️ $15.8M+ paid out in rewards.

[Xiaoming90 @xiaoming90]

@abbaskhan @Scroll_ZKP @razacodes @koreanpeds Good luck! Enjoy your break🙂

[SHERLOCK @sherlockdefi]

🏆 @usualmoney Audit Contest Results 🏆

Congrats to:
1. @0xSlowbug, @0xlemonaudits, @4mj3x, @demorextess, @dobrevaleri, @drynooo, @hope_silver, @moray5554, @xiaoming90, Martians - $3,910 🥇

$50,000 rewards ➡️ $15.2M+ paid out in rewards.

[SHERLOCK @sherlockdefi]

🏆 @DebitaFinance Audit Contest Results 🏆

Congrats to:
1. @xiaoming90 - 6,610.96 USDC🥇
2. @thongtrungtran - 5,913.00 USDC🥈

@xiaoming90 made 25,000.00 USDC fixed pay + 6,610.96 USDC from the contest pot!

60,500.00 USDC rewards ➡️ $12.8M+ paid out in rewards.

[Xiaoming90 @xiaoming90]

@0xTex @Bond_Protocol Thanks a lot!

[Xiaoming90 @xiaoming90]

@cabraun Thanks a lot!

[Xiaoming90 @xiaoming90]

Looking forward to securing more protocols at @blackthornxyz!

[SHERLOCK @sherlockdefi]

Introducing xiaoming90, the first founding security researcher of @blackthornxyz.

@xiaoming90's track record speaks for itself. 21 audit contest wins. 18 contests as Lead Senior Watson. Held the #1 spot on Sherlock's leaderboard for many weeks.

His background is traditional Web2 security: he spent 8 years in-house at reputable cybersecurity firms performing a wide range of security engagements for clients around the globe.

After making the transition into Web3 security, he’s become a specialist in bridges, L2 solutions, cross-chain communication, and liquid staking/re-staking mechanisms. But he's also secured some of the most complex DeFi protocols across lending/borrowing, perpetuals, options, derivatives, and order-book mechanisms, auditing @NotionalFinance, @usualmoney, @symm_io, @0xflatmoney, @NapierFinance, and many others.

What sets him apart is his creativity and deep understanding of a codebase. He’s uncovered 34 solo high-severity issues and 65 solo medium-severity issues, which is essentially unheard of.

xiaoming90 is more than an auditor—he’s a stalwart of blockchain security.

Please congratulate xiaoming90 on this new role.

[SHERLOCK @sherlockdefi]

🏆 @usualmoney Audit Contest Results 🏆

Congrats to:
1. 0xmystery, @0xNirix, @0x_0x37, @KupiaSecurity, @xiaoming90, @zarkk01, Bigsam, dhank - 4,367.29 USDC🥇
2. @niroh30, LZ_security, PeterSR, ke1caM - 3,354.08 USDC🥈

@xiaoming90 made 21,500.00 USDC fixed pay + 4,367.29 USDC from the contest pot!

87,000.00 USDC rewards ➡️ $12.4M+ paid out in rewards.

[Xiaoming90 @xiaoming90]

@giraffe0x That would be really helpful. Much appreciated 🙏

[SHERLOCK @sherlockdefi]

🏆 @symm_io Audit Contest Results 🏆

Congrats to:
1. @xiaoming90 - $15,000.00🥇

@xiaoming90 made $9,000.00 fixed pay + $15,000.00 from the contest pot!

$26,000.00 rewards ➡️ $11.8M+ paid out in rewards.

[Xiaoming90 @xiaoming90]

@abbaskhan @sherlockdefi Congrats! Enjoyed working with you during your time at Sherlock. May our paths cross again😄

[SHERLOCK @sherlockdefi]

Was great working with the @TokemakXYZ team and @xiaoming90 on this one

[AUTOfinance (prev. Tokemak) @autopools]

@sherlockdefi @xiaoming90 Thank you @sherlockdefi and thank you @xiaoming90 🤝 Great experience and a great Watson.

[AUTOfinance (prev. Tokemak) @autopools]

Crowd Competition

Working @sherlockdefi, Autopilot’s codebase underwent a crowd competition that combined a traditional audit, led by @xiaoming90 (Lead Watson), with a crowd-sourced approach.

Crowd competitions offer a complementary level of scrutiny to the review process.

[Xiaoming90 @xiaoming90]

@shunduquar You just make my day 🤣