@0xSimao

Founding Researcher @blackthornxyz | @sherlockdefi watson of the year 2025 | Founder The Contest Academy | DM for audits https://nitter.cf/t.co/V6VPeRhk6I

0xsimao.com/
Joined September 2022
  • Tweets2.1K
  • Following1K
  • Followers4.9K
252Media
1/ Introducing The Mentorship Series 0xsimao.com/blog/introducing… I’m personally mentoring a small, hand-picked group of auditors in 2026. 1st announced tmr. 3 months of 1-on-1 mentoring with me each. Targets: 0 → 4 figures 4 → 5 figures Step 1: Like and repost this post.
67
222
43
591
67,884
0xSimao retweeted
pashov
@pashovSep 23
🚨SOLIDITY-AUDITOR V4 IS NOW OPEN SOURCE (MIT LICENSE) A single command now gets up to 85% recall on High severity findings from multi-week contests from last year. This used to cost protocols tens of thousands - we made it FREE, so any dev can build more safely. by PAG team🫡
48
67
22
516
44,847
Super happy for @OpenZeppelin, hard work pays off. How many crits was the deal?
34
1,638
Just unfortunate, always seemed like a great team even though I never worked directly with them, you will be remembered 🫡
Balancer
@BalancerSep 14
A proposal to wind down Balancer and distribute the treasury to BAL holders is live on the forum, authored by Marcus Hardt. Discussion is open; a Snapshot vote is expected to happen from 25 to 29 September. Nothing changes today: pools and withdrawals work as they do now. Any wind-down action waits for the vote.
22
1,428
Just got this msg from an agent and found it pretty funny > Nothing needs your money. kay boss 👍
1
30
1,497
Something interesting I have found with AI is it finds a really cool vulnerability in one protocol. But then, I point it at another protocol with a very similar bug without telling it that bug exists; it doesn't find it. Have not pursued this further, thoughts?
12
1
71
3,562
Crazy stuff going on
Liquid Network 🌊
@Liquid_BTCSep 6
We are aware of a security incident on @Liquid_BTC. Purported white-hat hackers have withdrawn ~4,000 BTC (~$320 million) from the Liquid Federation wallet. The @Blockstream team is working on contacting them on-chain with a signed message. What we know so far is that the funds were withdrawn via the SideSwap PAK (Peg-out Authorization Key), but that key was not compromised, nor were any others. Exchanges have been notified and have already paused (or will pause) LBTC deposits and withdrawals. Other Liquid assets such as USDT, DePix, and RWAs are unaffected by this security incident. Bridge nodes have been temporarily disabled, so no new transactions can be submitted to the network. Effectively, the Liquid sidechain is paused until this issue is resolved. Liquid wallets will be impacted, and we're sorry for any inconvenience. Federation members are actively working on resolving this so we can restore normal network activity. You can monitor the situation via @mempool's liquid.network site below: mempool.space/address/bc1qdl…
1
24
2,056
I just found a confirmed bug on @immunefi #immunefitribe immunefi.com/s/ss/?severity=…

I just found a confirmed bug!

Crypto and smart contract bug bounty programs. Immunefi has paid $140M+ across 650+ protocols, more than the rest of the market combined.

immunefi.com
5
1
154
4,165
1/ The Contest Academy - Bug Deep Dive #35 🧵 0xsimao.com/the-contest-acad…
2
8
36
2,294
more replies
6/ Impact Positions stay open below the level the protocol designed for. isLiquidateable returns false, so no liquidator has a reason to call. The gap opens exactly when the lending pool tightens its limit, which is when the asset got riskier.
1
162
7/ Conclusion This finding would earn you $1009, split three ways. The fix is min(vp.maxTimesLeverage, maxLevTimes). The whole bug is that the require gating the open has two conditions and the check gating the liquidation has one.
146
why is the etherscan code viewer still so bad
5
25
2,569
What is this Opus 5 safeguards bs, thought it only happened for fable
1
22
2,232
Edited the format of the blog posts, I think they are a better read now, I am going to post more of my findings since I understand them much better so the explaining is also more thorough. Hope you enjoy it! Real Uniswap tick alpha 🤫 0xsimao.com/the-contest-acad…

Rebalancing on slot0.tick centres the band one tick off the price — Bug Deep Dive #34

Rebalancing on slot0.tick centres the band one tick off the price — Yieldoor is a concentrated liquidity manager. On every rebalance it picks a band around…

0xsimao.com
0xSimao
@0xSimaoAug 8
1/ The Contest Academy - Bug Deep Dive #34 🧵 0xsimao.com/the-contest-acad…
2
47
2,693
1/ The Contest Academy - Bug Deep Dive #34 🧵 0xsimao.com/the-contest-acad…
2
3
1
90
6,470
more replies
7/ The result The rebalance then reads the stale tick and centres the band on it. Price at tick -1769, band minted -1772 to -1768. Three ticks of room below, one above, on a position that is supposed to be even on both sides. Out of range it earns nothing.
1
5
322
8/ Conclusion This finding would earn you $3738. I wouldn't say it is difficult, but it needs you to open UniswapV3Pool.sol and read what slot0 guarantees, not what the field names suggest. High severity, since the position is mispriced the moment it is minted.
4
284
Load more