Joined February 2023
- Tweets725
- Following572
- Followers1.5K
- Likes3.1K
Since this is my last day in India and attending @EFDevcon , here are my closing thoughts on the event.
This was my first ever Devcon and overall big web3 event that I attended. I was admired by its size, people and quality.
I was able to personally meet so many wonderful people that I knew online for years. The feeling of starting a conversation with someone, 10 minutes later asking their X handle and realizing that it's THAT guy is incomparable. Thank you everyone who bumped into me and chatted.
There were a couple of interesting talks, though mostly everyone it still talking about AI. But if you are a student or a builder, useful knowledge was shared, especially at the community hubs.
What I disliked is everyone who was doing airdrops and giving out merch. Especially the airdrop thing, like, why? What is the benefit for the project or the people at the booth to attract hundreds of airdrop hunters?
As for the industry thoughts:
- Institutional conversations are everywhere
- We will see more and more AI written SC code as there are now custom solutions to that
- Human audits are still praised as the best security tool (which I'm glad to hear)
- Bug bounty experience is as bad as it has ever been and many reputable SRs switched to private audits only
- Formal Verification is what on everyone's minds for the next year
- Vitalik never ceases to surprise
I don't care what everyone says about this Devcon being worse than others, I wholeheartedly enjoyed it.
Oh, and @summit_defi is the best.
Peace
Just had a talk at @EFDevcon at Security Hub booth
Thank you once again @thedaofund for inviting me, it was a blast
See you next year?
Tim retweeted
@MetaMask builder night in mumbai
went in expecting to just listen, ended up getting a crash course on smart contract security from @0xTimofey and @0xrudrapratap. where to start with audits, what actually matters
met so many more good people after that.
mumbai week delivering
Still at @summit_defi , but already thinking about @EFDevcon
See you all there tomorrow
Tim retweeted
Binance hot wallets lost ~$6.28B across 8 chains today. $6.07B went in the first 55 minutes, and the attacker kept re-sweeping one Ethereum wallet for two more hours.
Since then Tether, Circle, Ripple, Paxos, World Liberty and Binance have frozen ~$2.80B. About $3.27B can still move, mostly BTC and ETH.
I traced it all on-chain, including how the attacker raced the freezes 🧵
I'm excited to speak at SecurityHub at @EFDevcon
Thank you @thedaofund for the opportunity
For anyone who wants to listen to some rants about bug bounties and critical disclosures, I'll be around on Nov 4th
See you all there!
Woot woot 🚨
This is a call out to experienced and seasoned security researchers
CertiK Hunt has places and is waiting for its hunters
DM me or @unsafe_call
We’ve got slots open for CertiK Hunt!
DM me if you or someone you know has done any of these:
• >$250k earned from contests or bounties
• Recent big bounty payouts
• Multiple top CTF placements
• Published writeups for findings or past audits
If you know someone who fits, feel free to share this post or tag them in the comments 👾
We are very excited to welcome @WemixNetwork to join CertiK Hunt
All invited whitehats can already check Wemix's Blockchain/DLT and Smart Contract code
WEMIX Bug Bounty Program is now live on CertiK Hunt🛡️
Security researchers can now explore the scope and submit vulnerabilities related to WEMIX3.0, with rewards of up to $10,000 based on severity and impact 🔐
Start hunting below 👇
hunt.certik.com/explore/wemi…
📢 See the full announcement at #WEMIX community
👉wemix.com/news/wemix-fortifi…
At CertiK, our only goal is to make the space as secure as possible.
Give this man a follow!
Alchemix is one of those universally respected programs with a crystal clear BBP reputation.
A perfect profile for CertiK Hunt and a great target for our hunters.
We've only just started.
With a $150K maximum reward, the stakes just got higher on CertiK Hunt. 🎯
@AlchemixFi’s Bug Bounty Program is now live, giving security researchers the opportunity to put their skills to work and help strengthen the protocol.
Explore the scope and start hunting ↓
hunt.certik.com/explore/alch…
Good Hunter, you've done well, the night is near its end.
Now I will show you mercy. You will get an invite, embrace the dream, and awake under the morning sun.
I feel bad for it :(
The model appeared defeated, spending the next several hours doing essentially nothing but farming potatoes. Stream viewers noticed and complained that Astra needed to "pick up the pace." Astra also seemed to become paranoid about creepers: "GREEN tall thing ahead was SUGARCANE, NOT creeper!" At times it was hard on itself: "you can screw up and drop things"; "do NOT waste another night chasing dark pink pixels" (its own disparaging wording for pigs); "our last tool stupidly ended Slabsselected/rightUP and 15sec thinking killed us".
I'm grateful for the opportunity to work with you again 🤝
MAKE BUG BOUNTIES GREAT AGAIN
We’re excited to welcome Alejandro Munoz (@unsafe_call) to CertiK! 🛡️
Alejandro brings deep expertise in smart contract security, vulnerability research, and incident response, with extensive experience tackling some of Web3’s most complex security challenges.
Welcome to the team, Alejandro! 👋
It would be cool if there was another bug bounty platform paying life-changing rewa...
Oh, there is one!
Finding vulnerabilities pays. Literally. 💰
Congratulations to @desm_de_crypto on earning a $30,000 bug bounty payout for helping uncover vulnerabilities before they can be exploited.
Good finds deserve meaningful rewards.
