Founder @ https://xitter.cf/t.co/gcgrMm5l8P, JohnnyTime @ Youtube, Securing Web3 @ https://xitter.cf/t.co/wJdpJyYK5y & https://xitter.cf/t.co/3d9aL8nDvG
Web3
Joined February 2012
- Tweets10.6K
- Following1.5K
- Followers12.8K
- Likes37.1K
JohnnyTime π€π₯ retweeted
An audit badge is not a security guarantee.
331 verified incidents, 69 linked audit firms, $4.0B in known losses. Read the reports. Check scope and code versions.
Accountability starts with evidence:
smartcontractshacking.com/toβ¦
JohnnyTime π€π₯ retweeted
Need to revisit reentrancy, flash loans, or oracle manipulation?
Search lessons and modules directly inside the SCH lesson player.
Find the topic you need without scrolling through the entire curriculum. Especially useful when you're working through an exercise.
JohnnyTime π€π₯ retweeted
Smart contract security pays more than any other 9-5 job in Europe or anywhere else.
If you wanna learn SCS then go to @RealJohnnyTime π
Security researcher ily2 has just earned a staggering $3,000,000 from submitting a critical smart contract bug via Immunefi.
That's the largest single payout in web3 security in recent memory.
In total, he's submitted 3 reports. All 3 were paid. 100% accuracy.
His leaderboard update is coming soon, but you can pledge IMU to him now and earn when he finds the next one:
immunefi.com/pledge/ily2
JohnnyTime π€π₯ retweeted
$50,000 goes to a Junior security researcher who joined Immunefi just last month! π₯
@n0_Be3r found a high-severity vulnerability, earning $50k from their very first paid report.
With just one payout, theyβve already jumped to #22 on the 90-day leaderboard.
What a debut.
Congrats @n0_Be3r! π
JohnnyTime π€π₯ retweeted
Smart contract security pays WELL.
π° Top auditors make $500K+ per year
π° Bug bounties can 10x that
π° Even βmidβ auditors make six figures
BUT⦠Only if you actually put in the work. No shortcuts here.
JohnnyTime π€π₯ retweeted
Oracle manipulation attacks in one picture.
Study it in the first comment.
JohnnyTime π€π₯ retweeted
Ironically, exactly 3 years ago, I was recording my Smart Contract Hacking course.
In the Oracle Price Manipulation chapter, I needed an example of what NOT to do in a lending protocol.
I used Tectonic on Cronos as the bad example.
Fast-forward 3 years⦠and its TVL gets drained by a black-hat hacker.
You really can't make this shit up π
And people still ask whether smart contract security is becoming irrelevant because of AI.
If anything, incidents like this prove the opposite.
The need for people who actually understand how these systems break isn't going away.
Apparently, my 3-year-old course aged pretty well π«‘
JohnnyTime π€π₯ retweeted
if you're just getting into smart contract security, these 5 accounts belong on your feed.
@pashov β building not just a career as a researcher but a whole firm around it. a real source of inspiration.
@RealJohnnyTime β created the smart contract hacking course and puts educational content on his youtube regularly.
@arsen_bt β posts weekly exploit breakdowns that make it easy to keep up with what's happening in the space. proof of what real trajectory looks like in this field.
@PatrickAlphaC β teaches web3 from scratch on @CyfrinUpdraft. solidity fundamentals to foundry to hands-on smart contract security.
@windhustler β shares real insights about what separates great researchers from average ones.
bookmark this. thank me later.
JohnnyTime π€π₯ retweeted
If there's no uncertainty, you're not making any money.
The discomfort is the price of admission. It's also where the return lives.
JohnnyTime π€π₯ retweeted
i hate security disclosure so much. the number of companies that take our work for granted is insane. how about you talk to us collaboratively from the start instead of being asinine about it?
like, give us some respect, bro. we worked on this shit for weeks/months and showed you something that could have become a massive disaster if a bad guy finds it, and you donβt even seem to give a fuck and see us like some villains?
JohnnyTime π€π₯ retweeted
Just got my first confirmed finding in a smart contract audit competition on @Immunefi
Huge thanks to @TheBlockChainer and @RealJohnnyTime; a lot of what I applied here came straight from what you two put out. Grateful. This is just the start.
JohnnyTime π€π₯ retweeted
Just finished another level!
I am hacking Privacy in the SCH Exploit Challenge.
Can you beat me? π smartcontractshacking.com/toβ¦
@RealJohnnyTime hoping to get SCH seat one day ser.
JohnnyTime π€π₯ retweeted
New: Now we have different tracks which you can complete in the CTF platform - more levels and challenges coming soon, stay tuned!
JohnnyTime π€π₯ retweeted
Decided to share this clip from @RealJohnnyTime podcast with @pashov.
You're still early if you want to start learning web3 security.
Follow the steps @pashov mentioned in the clip, also checkout my blog for security related articles.
JohnnyTime π€π₯ retweeted
smartcontractshacking.com/toβ¦
Join me and 100+ security researchers in a free, competitive and fun way of learning smart contract security.
A CTF platform built by one the OGs in the industry - @RealJohnnyTime . Climb up the leaderboard to win a full free seat of the SCH course.
JohnnyTime π€π₯ retweeted
4 days since the SCH hacking arena launched:
> 86 hackers
> 1,120 exploit submissions
> 306 levels solved
> 23 beat all 11 challenges
! 70% of submissions fail the Foundry verifier !
Most hacker points by Aug 11, 21:00 UTC wins a free SCH seat:
smartcontractshacking.com/toβ¦
JohnnyTime π€π₯ retweeted
Draining the ETH from a smart contract with access control vulnerability from the smart contract hacking course exercise
JohnnyTime π€π₯ retweeted
Done! π
I've completed all the Smart Contracts Hacking CTF challenges and reached #11 on the leaderboard.
Every challenge is documented with detailed write-ups and exploits in my audit repo. More security research and auditing ahead. @RealJohnnyTime thanks for the chanceπ«‘
JohnnyTime π€π₯ retweeted
This is so exciting!
The CTF platform was only launched yesterday, and already so many people have joined in and are solving challenges in a new, fun way.
If you're one of the players, I'd love to hear your feedback - either here in the comments or via DM. Feel free to reach out! π€
JohnnyTime π€π₯ retweeted
Just in one day being very close with an amazing competition! I'll be in top very soon ..
Let's break all of it! @RealJohnnyTime π£
