Founding Security Researcher @blackthornxyz | Lead Senior Watson @sherlockdefi | Security Researcher @SpearbitDAO | Portfolio: https://xitter.cf/t.co/sg2mgn4ZkM

Joined January 2022
After more than a year of competing in Sherlock, I have finally achieved #1 on the leaderboard. I'm looking forward to competing in more contests, contributing to the security of more protocols, and continuing to learn from the many great auditors out there.
17
7
1
182
18,540
Xiaoming90 retweeted
Blackthorn takes this further. We reserve Sherlock’s highest-tier auditors for the codebases where only the best reviewers should be in the room. For the highest-stakes launches, Blackthorn assembles exclusive audit teams from the strongest performers across Sherlock’s 11,000+ researcher network.
Sherlock created an audit team assembly system based on deep performance data. Most security firms rely on fixed in-house teams or assign researchers based on availability. Over time, we kept seeing the same gaps: auditors placed on codebases that didn’t match their strengths, and blind spots no small static team can realistically cover. Every researcher in our network is scored on accuracy, severity classification, specialization, and false positive history. When a private audit starts, we assemble audit teams based on who is most likely to catch what matters in that specific codebase.
1
17
3,021
Honored to be selected as an ETHSecurity Badge holder among such an incredible group of talented people in the security space. Will continue to work hard to make Ethereum safer!
The final 100 ETHSecurity Badge holders are in! That brings us to 200 security experts, guiding how TheDAO allocates its funds and also coordinating behind the scenes to make Ethereum safer. Big thanks to everyone who engaged with the process and helped shape it, and to @bonfiresai for building the tooling that made it possible.
3
1
63
2,794
Glad to have secured 1st place in the Fluid V2 contest. Managed to find all H/M issues in the contest. Thanks to @0xfluid and @sherlockdefi for the opportunity!
33
5
319
4,665
Looking forward 🙂
62
2,510
🏆 @allbridge_io Audit Contest Results 🏆 Congrats to: 1. @Alicrali333, @EgisSec, @VeerendraVamshi, @X0sauce, @xiaoming90, BobbyAudit - $700 🥇 2. 0xloophole, @0xdemonnn, @0xomeiza, @MishkatM80976, Emine, Hurricane, MysteryAuditor, WillyCode20 - $549 🥈 $19,000 rewards ➡️ $15.8M+ paid out in rewards.
4
4
5
35
15,503
🏆 @usualmoney Audit Contest Results 🏆 Congrats to: 1. @0xSlowbug, @0xlemonaudits, @4mj3x, @demorextess, @dobrevaleri, @drynooo, @hope_silver, @moray5554, @xiaoming90, Martians - $3,910 🥇 $50,000 rewards ➡️ $15.2M+ paid out in rewards.
3
7
3
58
7,291
🏆 @DebitaFinance Audit Contest Results 🏆 Congrats to: 1. @xiaoming90 - 6,610.96 USDC🥇 2. @thongtrungtran - 5,913.00 USDC🥈 @xiaoming90 made 25,000.00 USDC fixed pay + 6,610.96 USDC from the contest pot! 60,500.00 USDC rewards ➡️ $12.8M+ paid out in rewards.
🚨 New contest: Debita Finance V3 @DebitaFinance 🚨 Sign up here: audits.sherlock.xyz/contests… Total Rewards: 62,000 USDC nSLOC: 2325 Lead Senior Watson: @xiaoming90 Starts Monday, November 11th at 15:00 UTC Check it out!!
1
1
1
19
6,645
Looking forward to securing more protocols at @blackthornxyz!
Introducing xiaoming90, the first founding security researcher of @blackthornxyz. @xiaoming90's track record speaks for itself. 21 audit contest wins. 18 contests as Lead Senior Watson. Held the #1 spot on Sherlock's leaderboard for many weeks. His background is traditional Web2 security: he spent 8 years in-house at reputable cybersecurity firms performing a wide range of security engagements for clients around the globe. After making the transition into Web3 security, he’s become a specialist in bridges, L2 solutions, cross-chain communication, and liquid staking/re-staking mechanisms. But he's also secured some of the most complex DeFi protocols across lending/borrowing, perpetuals, options, derivatives, and order-book mechanisms, auditing @NotionalFinance, @usualmoney, @symm_io, @0xflatmoney, @NapierFinance, and many others. What sets him apart is his creativity and deep understanding of a codebase. He’s uncovered 34 solo high-severity issues and 65 solo medium-severity issues, which is essentially unheard of. xiaoming90 is more than an auditor—he’s a stalwart of blockchain security. Please congratulate xiaoming90 on this new role.
5
1
72
5,324
🏆 @usualmoney Audit Contest Results 🏆 Congrats to: 1. 0xmystery, @0xNirix, @0x_0x37, @KupiaSecurity, @xiaoming90, @zarkk01, Bigsam, dhank - 4,367.29 USDC🥇 2. @niroh30, LZ_security, PeterSR, ke1caM - 3,354.08 USDC🥈 @xiaoming90 made 21,500.00 USDC fixed pay + 4,367.29 USDC from the contest pot! 87,000.00 USDC rewards ➡️ $12.4M+ paid out in rewards.
🚨 New contest: Usual V1 @usualmoney 🚨 Sign up here: audits.sherlock.xyz/contests… Total Rewards: 89,000 USDC nSLOC: 3312 Lead Senior Watson: @xiaoming90 Starts Tuesday, October 29th at 15:00 UTC Check it out!!
2
5
2
20
6,764
🏆 @symm_io Audit Contest Results 🏆 Congrats to: 1. @xiaoming90 - $15,000.00🥇 @xiaoming90 made $9,000.00 fixed pay + $15,000.00 from the contest pot! $26,000.00 rewards ➡️ $11.8M+ paid out in rewards.
🚨 New contest: SYMMIO v0.8.4 Update Contest @symm_io 🚨 Sign up here: audits.sherlock.xyz/contests… Total Rewards: 26,000 USDC Previous Scope nSLOC: 5057 Update Scope nSLOC: 723 Lead Senior Watson: @xiaoming90 Starts Wednesday, October 2nd at 15:00 UTC Check it out!!
1
1
16
3,308
Was great working with the @TokemakXYZ team and @xiaoming90 on this one
Replying to @autopools
Crowd Competition Working @sherlockdefi, Autopilot’s codebase underwent a crowd competition that combined a traditional audit, led by @xiaoming90 (Lead Watson), with a crowd-sourced approach. Crowd competitions offer a complementary level of scrutiny to the review process.
1
1
7
2,278
Thank you @sherlockdefi and thank you @xiaoming90 🤝 Great experience and a great Watson.
1
3
936
Crowd Competition Working @sherlockdefi, Autopilot’s codebase underwent a crowd competition that combined a traditional audit, led by @xiaoming90 (Lead Watson), with a crowd-sourced approach. Crowd competitions offer a complementary level of scrutiny to the review process.
1
1
1
13
3,367