Joined January 2023
0/ heimdall-rs 0.7.0 is here 🎉 🎅 let's take a look at what's changed over the past month 👇
6
11
1
76
15,594
Actually some DeFi liquidations there, first time in > a year that retail been getting levered onchain
13
22
2
356
58,827
evm.wiki retweeted
Last week I did my first web3 security coaching consultation. To put it simply: 1. Learn solidity (Patrick Collins YouTube 32hr course) 2. Secureum bootcamp 3. Smart contracts hacking course 4. code4rena & Sherlock - read reports & participate That's about it
30
99
9
702
48,132
Check out @0xOwenThurm's new video. He is showing his thought process while live auditing. Definitely very helpful video for the guys who know Solidity and are getting into auditing. Love it 🫡🤝 youtube.com/watch?v=X9DTJJGD…
1
4
1
25
1,546
Hi guys! Sorry for a delay on my promise to share a roadmap for improving audit skills. While creating this roadmap & timelines, I've assumed a person is relatively new to smart contracts & would be able to invest 3-4 hours a day... So here we go...
37
132
16
443
54,665
foundry makes things 10x easier when doing audit related stuff.
33
evm.wiki retweeted
This is likely the best walkthrough on the EVM I've seen: youtube.com/watch?v=RxL_1AfV… Quite long at 1h30m but provides valuable context for any smart contract auditor doing audits on projects that run on the EVM.
9
14
1
139
10,417
evm.wiki retweeted
For new Smart Contract Auditors: @zzykxx is great auditor to look up to. He's got great blog posts at zzykxx.com/ on his web3 journey & @code4rena performance. Highlights: - Earned $40k in first 2 months on C4 - Learned web3 dev start of 2022 - Did C4 on Sep 2022
2
24
126
9,790
Dropping some real alpha in this thread, so read it couple of times and try to apply it to your next audit 🧵 1/ A threat model for a smart contract is a way to identify potential security threats and vulnerabilities that may exist within the code of the contract, as well as..
4
20
1
77
9,693
how tf do i use a seed phrase using ffi in foundry? been scratching my head for last few hours about this.
33
It's out! Just published my new article about RLP encoding. Useful to learn, for auditors, researchers, and developers. Due to the ongoing audit of zkSync, it is split into 3 parts, which will be released in a week. ENJOY🕵️‍♀️🫡. Btw, I am for hire, DM ;) medium.com/@mweiss.eth/rlp-e…
2
11
1
48
4,507
Been finding this useful for getting full coverage on unit tests w/ Foundry: 1. Add `lcov.info` to .gitignore 2. Run `forge coverage --report lcov` 3. Install the "Coverage Gutters" extension marketplace.visualstudio.com… 4. cmd+shft+p > "Display Coverage Gutters"
8
25
4
169
18,551
auditing new codebase
21
evm.wiki retweeted
1/5 Today I wanne share my monthly roundup with you! You can find a detailed summary here zaskoh.com/2023/03/06/explor… and a short summary in this 🧵
2
4
1
28
2,823
Bunch of the bros just doxx’ed me after I showed them a redacted version of my website. What a fool I am.
22
evm.wiki retweeted
Wanna get deeper into Assembly? Today, let’s solve the Ethernaut challenges entirely with Yul! github.com/teddav/ethernaut-…
3
17
2
84
9,256
evm.wiki retweeted
Celebrating today's @erc4337 announcement, here is a writeup of @code4rena i promised last weekend I have reported all of 5 my issues as High on contest but i don't know which one ended up as Q or solo.
First try in @code4rena audit contest, 4 high, 1 solo, 1st place. LFG Details on @biconomy erc4337 wallet findings will be shared soon :)
5
12
2
97
14,606
This is the MOST ALPHA research paper about smart contract security EVER. 🧵 THEORY: They examined 516 smart contract security bugs & exploits. FACTS: They applied the THEORY in @code4rena contests & bug bounties and received a total prize of $102k 🤯 github.com/ZhangZhuoSJTU/Web…
34
206
20
881
89,646
evm.wiki retweeted
For the audit I'm following @1nf0s3cpt's methodology: defihacklabs.substack.com/p/… And @transmissions11's Solcurity Standard: github.com/transmissions11/s… Would highly recommend checking these out! 🚀
3
12
430