🥌 Evm/Non-Evm Auditor & Security Researcher at @PashovAuditGrp | @TenaliaAudits | @SoleaAuditLab 🥌 100+ H/Ms spotted in public audits.
Audit Portfolio →
Joined September 2020
- Tweets4.7K
- Following2.5K
- Followers2.4K
- Likes10.8K
Tigerfrake retweeted
After 2 years and 500+ security audits, today is my last day as Head of Audits at @PashovAuditGrp .
Huge thanks to @pashov and the whole team for an incredible ride 🙏
I got to build something I'm genuinely proud of: a machine that automated our processes end to end, led every single audit, and coordinated hundreds of auditors and dozens of clients in parallel. A lot of audit firms never even hit that monthly volume - we did, and I don't remember it breaking once.
Now it's time for new horizons.
A bit about me and what I bring:
- Auditing DeFi since the early Code4rena days back in 2022
- Led the DeFi research team at @P2Pvalidator, specialized in on-chain data (I know this world inside out)
- 2 years as a hands-on auditor at @MixBytes on some of the biggest protocols out there - Aave, Curve, Yearn and more
- At @PashovAuditGrp: processes and management (big Lean fan - minimal necessary comms, transparent, data-driven) and AI - I built the stack of internal products and pipelines PAG runs on
(Plus a finance backbone - an economics and finance education toward investment banking and strategy consulting, 2 years of CFO-level financial management, and CFA exams.)
I'm a battle-tested. I ship projects, I'm good with people, I go deep on tech, can write code, manage team, and I can research literally anything. The harder and messier the problem, the more I want it.
So I'm open to new ideas and offers.
Got the hardest problem in the room? Send it.
DMs open
Tigerfrake retweeted
Another Uncommon approved.
@Tigerfrake flags rewardrate precision loss.
Query below:
Tigerfrake retweeted
New Rare approval!
@TigerFrake just earned 400 dollars for a query detecting rewardless behavior in staking contracts that can leave users without expected rewards.
Query below:
Tigerfrake retweeted
How ready are you for your first audit?
Getting audited is a big milestone and preparing right makes all the difference.
Join us by 3PM UTC today as we discuss what every builder should know before their first audit, from smart pre-audit habits to simple steps that save time and resources.
If you’re building in Web3, this Space will help you get truly audit-ready.
Set a reminder for our upcoming Space! teapawt.net/i/spaces/1MnGnPn…
Tigerfrake retweeted
This is an unsolicited candid advice for y’all diving into bug bounty:
Don’t go on wide goose chase. Just focus on a single contract class.
Like
Perpetuals
Consensus (DLT)
bridging
Anything specific
Increases your odds of finding a bug
Gives you experience in that niche
Tigerfrake retweeted
Web3sec contest winners really deserve their high prestige and payouts.
They succeed in the hardest environment possible - one with ZERO external pressure.
Think about it:
- No career-ending deadlines
- No boss to disappoint
- No signed contract
- No guaranteed payoff for their effort
They could abandon the contest anytime with absolutely no consequences
The perfect breeding ground for procrastination
Yet they push through 2-3 weeks of intense work with no assurance of finding anything valuable.
They commit fully and STAY committed, even when it would be so easy to quit. That's what makes their achievements impressive.
They dive deep into code and hunt vulnerabilities simply because they said they would. Pure self-discipline when giving up costs nothing.
That level of self-motivation against the gravitational pull of procrastination? Truly rare.
Massive respect to these security research chads. The bounty money and recognition are well-earned.
And watch out... I'll be joining those ranks soon. 🔍🏆
