zanderbyte

Security Researcher at @Certora

[zanderbyte @zanderbyte]

I'm happy to share that I’ve joined @certora as a Security Researcher.

After a year and a half working mostly solo, joining such a talented team feels like the right next step in my journey.

Grateful and proud to reach this point. 🫡

[zanderbyte @zanderbyte]

@nmirchev8 HBD, bro

[Plamen Tsanev @p_tsanev]

Every AI auditor now does the same boring thing.

So I went and fused the 4 security pillars into a singular pipeline:
- Static analysis
- RAG vulnerability search
- Recursive depth analysis
- Fuzzing and testing

Fully autonomous 🤖
Fully open-source 🔓
Going live tomorrow 🚨

[zanderbyte @zanderbyte]

@arturtoros @immunefi @AlchemixFi gg bro 🫡

[zanderbyte @zanderbyte]

@amarfares_ Finally back! Congrats, boyzz 🙌🏻

[bountyhunt3rz podcast @bountyhunt3rz]

30 EPISODES

LIFE ... ON THE BLOCKCHAIN

[sorryNotsorry @0xSorryNotSorry]

I just saw a “We warned Balancer” post from a multifollower legitimate account.

I hope someone finds the private key for the zero address and this circus ends.

[zanderbyte @zanderbyte]

@0xGivn @code4rena @FlareNetworks @alex0ppg Congrats 🫡

[zanderbyte @zanderbyte]

@n4nika_ @citrea_xyz @cantinaxyz Congrats bro, impressive performance 🫡

[zanderbyte @zanderbyte]

@MartinMarchev @citrea_xyz @cantinaxyz @tqkve @AifosSi Congrats bro 🫡

[kamensec @kamensec]

I miss the good ol CT with sick write ups, protocol break downs and tips, at the very least it was core protocol devs with near organ failure.

These days it’s a bunch of whiny little cunts crying about their ai auditor had issues rejected, or some guy got sick with the flu.

[tpiliposian @tpiliposian]

man, Bulgarian aura not only helps auditing better, it helps grapple better.
thanks for the cool rashguard, @zanderbyte.

[zanderbyte @zanderbyte]

@tpiliposian Smash ‘em, brother 🫡

[GiuseppeDeLaZara @windhustler]

web3 security Twitter lately:

> Company A, B, C: Our AI tool outperforms all the bad security companies on the market

> Pashov shows up at ETH Bulgaria in a Lamborghini

> Certora onboarded the nation of Bulgaria to do audits for them

crazy time to be alive

[zanderbyte @zanderbyte]

@MartinMarchev @0xAlexSR @0xT1MOH @KrisApost1 @AliX__40 @marcohextor @BowTiedDravee @abarbatei @xb0g0 @flack00n @timbata_00 How was the rakia?

[tpiliposian @tpiliposian]

Hey chat, we’re hiring Formal Verification Engineers at Certora.

I’ve noticed many security researchers in the space already use formal methods during audits, now it’s time to go deeper.

We’re looking for solid professionals with backgrounds in math, computer science, or formal methods.

If you want to work with a top-notch team and feel like this is for you, send me your CV, and please repost to help me find some legends.

[J4X @J4X_Security]

Went sidequesting in Bulgaria and got to meet the boys.

@nmirchev8 @n4nika_ @dethSCA @KrisApost1 @xb0g0 @zanderbyte @MartinMarchev

[zanderbyte @zanderbyte]

@coachPetrus The Equalizer

[zanderbyte @zanderbyte]

I watched a movie yesterday, and one quote I've heard stuck with me:
"Don't doubt yourself, son. Doubt kills."

It's a powerful mindset, don't second-guess yourself. Doubting yourself and your abilities is like ignoring your instincts, convincing yourself that the code is perfect.

What you really need is a shift.
Instead of doubting your skills, doubt the code.

Very often, the issues are in front of your eyes, and what you need is a little shift in your mindset and how you look at a certain function. Don't verify it works, find when it doesn't.

Assume there are bugs - believe it.
Because doubting the code is one of the most effective ways to find a helpful idea. And once you find one, you're already a step closer to the solution.

More on that soon.

[zanderbyte @zanderbyte]

I watched a movie yesterday, and one quote I've heard stuck with me:
"Don't doubt yourself, son. Doubt kills."

It's a powerful mindset, don't second-guess yourself. Doubting yourself and your abilities is like ignoring your instincts, convincing yourself that the code is perfect.

What you really need is a shift.
Instead of doubting your skills, doubt the code.

Very often, the issues are in front of your eyes, and what you need is a little shift in your mindset and how you look at a certain function. Don't verify it works, find when it doesn't.

Assume there are bugs - believe it.
Because doubting the code is one of the most effective ways to find a helpful idea. And once you find one, you're already a step closer to the solution.

More on that soon.

[zanderbyte @zanderbyte]

@MartinMarchev the web3 sec cold war (2025–?)