Audit-Ready 🕵️ | Web3 Security Researcher | CO Building @SoftwayFinance | Obsessed with 🕸️ Go · Cosmos · 🗝️Security
💻Solidity · 🕸️Go · 🦀Rust
Joined March 2019
- Tweets2.2K
- Following1.4K
- Followers644
- Likes18.6K
Codertjay retweeted
Do you know what's more expensive than an audit?
Don't worry if you don't. You'll find out sooner or later 💀
Codertjay retweeted
I've created a site to share some ideas.
My first post is about being a professional whitehat, and how I evaluate potential rewards to decide where to hunt.
whitehatmage.github.io/posts…
Codertjay retweeted
Biggest risk for security agent startups: no moat.
I used to think the harness mattered, then coding agents went from thousand-token system prompts to "just do the task" with a bash shell. So the moat probably isn’t that part, it’s the human-in-loop + data pipeline (bug bounties, on-chain deployed code, etc).
mariozechner.at/posts/2025-1…
Codertjay retweeted
First major hack of 2026, as @Truebitprotocol was drained for $26.2 million through an overflow in unverified bytecode.
The same attacker hit Sparkle weeks prior. Old code keeps bleeding - the archives have clearly become a shopping list.
rekt.news/truebit-rekt
Codertjay retweeted
Next year goal for my twitter would be me posting hacks and 6k hours of work time
Definitely don’t know how hard it would be but must try it 🫡🫡
Thanks to security 😭, I am now a complete stoic 😂
Tbh I don’t think I have a wrap for this year even though I started my career this year
October, November and December
I didn’t give my all so till next year would have a good wrap
But thanks @cantinaxyz for real because that’s the best platform to fail fast and grow 🫡🫡
Codertjay retweeted
Day 300/300
Done with my 300 hundred days of audit.
At the moment I only have few audit remaining like rain contract and some others
But right now seems I fucked up a lot in the last 50 days due to personal stuff and the next would be 6k hours of work for next year
Codertjay retweeted
1/ Introducing The Mentorship Series
0xsimao.com/blog/introducing…
I’m personally mentoring a small, hand-picked group of auditors in 2026. 1st announced tmr.
3 months of 1-on-1 mentoring with me each.
Targets:
0 → 4 figures
4 → 5 figures
Step 1: Like and repost this post.
Codertjay retweeted
Rules for making it in 2025 and beyond.
1) You don’t “make it” by begging for raises. You make it by becoming your own boss: own time, equity and optionality
2) W-2 is fixed income with obligations. Owner = variable income *and* unlimited upside. Risk = Reward
3) A flex isn’t materials it's no alarm clock. This is how leverage is made
4) Ownership mentality: sales, code and marketing. Distribution you control and Products with recurring revenue. Making money in your sleep. Reinvest profits
5) Start simple: Solve *one* problem for *one niche group. Deliver faster than expected. Repeat
6) Ideas are worth nothing, execution is everything
7) Your first $1K/month, idea is proven. First $10K/month, you're free. Scale to infinity
8) Three Nos: No meetings without purpose. No projects without timeline. No revenue generation? Pass.
9) Learn to sell or AI eats your lunch. Sales is proof of revenue. Everything else is an L.
10) KPI Tracking: monthly metrics kill bad days/weeks.
Quarterly review vs. last year
11) Ads are a license to print money: Target market x Offer x Conversion x Profit = Freedom
12) Risk management: W-2 is a single point of failure. Owner risk is under your control. Diversify through skills
13) Lifestyle in check: Inflate assets yearly vs expenses. Expanding profit line always
14/ Freedom stack: time for money -> performance based -> earning when you're not working - ads run in background
15) You will have many losses. It's the only way to learn and get better.
Good luck.
Codertjay retweeted
Happy to announce that I’ve joined @0xOwenThurm at @GuardianAudits as LSR
At the end of 2026, I’ll be releasing my Top 10 Crits we found throughout the year.
It will be a legendary tweet, stay tuned 🩵
Alhamdulillah
Codertjay retweeted
I do not wish a 9-5 job for my enemies in my country.
We’re actually being cheated on, and we think we are enjoying. It’s sad
Codertjay retweeted
I've always struggled with maths & used to avoid them when auditing, telling myself: will check it out later
(never checked it out again lol)
Maths used to be my nemesis but with time & small efforts compounded together, I am way better at it now
Embrace difficulty, get better
Codertjay retweeted
How @0xPaladinSec helped one of our clients save a significant amount of money👇
A protocol was under audit by us at the time it's bounty program was announced.
While reviewing it, we noticed several currently developed and not yet live contracts were listed as in-scope.
Since we were already auditing those contracts, we immediately reported all issues identified up to that point. Many of these findings would have been eligible for bounties, costing the protocol a HUGE amount of funds.
Always make sure to pick the bounty scope carefully, so you don't have to pay for the same issues twice - this would have been an expensive mistake!
Codertjay retweeted
pick your security researcher archetype
28%specialize, one language
31%diversify, multiple langs
41%whatever pays
131 votes • Final results
