@_Alex_Cipher

Web3 game security auditor. This is my old account. Here's my new one ➡️ @_AlexCipher

 Free Security Assessment Call➡
cal.eu/alexcipher/freesecurityreview
Joined September 2024
  • Tweets1.2K
  • Following8
  • Followers104
32Media
I am moving all operations to my new account - @_AlexCipher
35
If you never had an external audit, here's how to get ready for one 👇 1/5
1
48
more replies
Thirdly: Building on top of the last point, in-code comments do wonders too, use them 4/5
1
28
That would be all. As you can see there isn't much, your whole job is to let the auditor understand what to do and with what he is working with as fast as possible. 5/5
22
Manual analysis is the most important part of any of my web3 game audits. Automated tools currently can catch only the most obvious bugs, some AI tools can catch mid bugs maybe, but the deep, hard to find vulnerabilities are still only caught with a person actually reading the code.
1
25
audits are costly exploits are priceless security is a tough bet, you spend a ton of money for visibly not much improvements, but if you ever get exploited, you'll be regretting not doing any security work forever.
28
'rekt news' leaderboard is not a great leaderboard to be winning in. Don't be like that. Get an audit.
22
Don't discredit auditors who are able to audit fast. As a rule of thumb, yes - a short turn around likely means not much manual auditing was done, but this is not a hard rule. Some people once they get a client, they put all of their attention and hard work towards it to have a fast turnaround. An auditors worth and skill should be determined by testimonials/past work, not by length of turnaround or price.
1
25
Never got an external smart contract audit before? Here's what to expect👇 1/6
1
1
37
more replies
Lastly: Once the fixes are done, the auditor will check if the new fixes were implemented correctly and don't include new attack vectors. If everything is OK then he will make a final version of the report with your fixes. 5/6
1
28
Reminder: The auditor is always there to help. If you don't understand a finding in the report, don't be afraid to reach out. 6/6
32
The cheapest audit you'll ever get is before launch. After an exploit it's not an audit you need — it's damage control
19
Most Web3 games that got exploited had one thing in common — they skipped the audit. Don't be like that. Here's how a good audit actually impacts in your game 👇 1/5
1
1
40
more replies
such code is also more gas efficient, therefore your players don't need to be spending as much per transaction (which adds up fast) 4/5
1
20
If you're building a Web3 game and haven't had your contracts reviewed — my DMs are open. First review is free. 5/5
24
Load more