
Founding Security Researcher @blackthornxyz | Lead Senior Watson @sherlockdefi | Security Researcher @SpearbitDAO | Portfolio: https://xitter.cf/t.co/sg2mgn4ZkM
Joined January 2022
- Tweets109
- Following1.6K
- Followers2.7K
- Likes453
Pinned Tweet
After more than a year of competing in Sherlock, I have finally achieved #1 on the leaderboard. I'm looking forward to competing in more contests, contributing to the security of more protocols, and continuing to learn from the many great auditors out there.
Xiaoming90 retweeted
Blackthorn takes this further.
We reserve Sherlock’s highest-tier auditors for the codebases where only the best reviewers should be in the room.
For the highest-stakes launches, Blackthorn assembles exclusive audit teams from the strongest performers across Sherlock’s 11,000+ researcher network.
Sherlock created an audit team assembly system based on deep performance data.
Most security firms rely on fixed in-house teams or assign researchers based on availability. Over time, we kept seeing the same gaps: auditors placed on codebases that didn’t match their strengths, and blind spots no small static team can realistically cover.
Every researcher in our network is scored on accuracy, severity classification, specialization, and false positive history.
When a private audit starts, we assemble audit teams based on who is most likely to catch what matters in that specific codebase.
Honored to be selected as an ETHSecurity Badge holder among such an incredible group of talented people in the security space. Will continue to work hard to make Ethereum safer!
The final 100 ETHSecurity Badge holders are in!
That brings us to 200 security experts, guiding how TheDAO allocates its funds and also coordinating behind the scenes to make Ethereum safer.
Big thanks to everyone who engaged with the process and helped shape it, and to @bonfiresai for building the tooling that made it possible.
Glad to have secured 1st place in the Fluid V2 contest. Managed to find all H/M issues in the contest. Thanks to @0xfluid and @sherlockdefi for the opportunity!
Xiaoming90 retweeted
🏆 @allbridge_io Audit Contest Results 🏆
Congrats to:
1. @Alicrali333, @EgisSec, @VeerendraVamshi, @X0sauce, @xiaoming90, BobbyAudit - $700 🥇
2. 0xloophole, @0xdemonnn, @0xomeiza, @MishkatM80976, Emine, Hurricane, MysteryAuditor, WillyCode20 - $549 🥈
$19,000 rewards ➡️ $15.8M+ paid out in rewards.
Xiaoming90 retweeted
🏆 @usualmoney Audit Contest Results 🏆
Congrats to:
1. @0xSlowbug, @0xlemonaudits, @4mj3x, @demorextess, @dobrevaleri, @drynooo, @hope_silver, @moray5554, @xiaoming90, Martians - $3,910 🥇
$50,000 rewards ➡️ $15.2M+ paid out in rewards.
Xiaoming90 retweeted
🏆 @DebitaFinance Audit Contest Results 🏆
Congrats to:
1. @xiaoming90 - 6,610.96 USDC🥇
2. @thongtrungtran - 5,913.00 USDC🥈
@xiaoming90 made 25,000.00 USDC fixed pay + 6,610.96 USDC from the contest pot!
60,500.00 USDC rewards ➡️ $12.8M+ paid out in rewards.
🚨 New contest: Debita Finance V3 @DebitaFinance 🚨
Sign up here: audits.sherlock.xyz/contests…
Total Rewards: 62,000 USDC
nSLOC: 2325
Lead Senior Watson: @xiaoming90
Starts Monday, November 11th at 15:00 UTC
Check it out!!
Looking forward to securing more protocols at @blackthornxyz!
Introducing xiaoming90, the first founding security researcher of @blackthornxyz.
@xiaoming90's track record speaks for itself. 21 audit contest wins. 18 contests as Lead Senior Watson. Held the #1 spot on Sherlock's leaderboard for many weeks.
His background is traditional Web2 security: he spent 8 years in-house at reputable cybersecurity firms performing a wide range of security engagements for clients around the globe.
After making the transition into Web3 security, he’s become a specialist in bridges, L2 solutions, cross-chain communication, and liquid staking/re-staking mechanisms. But he's also secured some of the most complex DeFi protocols across lending/borrowing, perpetuals, options, derivatives, and order-book mechanisms, auditing @NotionalFinance, @usualmoney, @symm_io, @0xflatmoney, @NapierFinance, and many others.
What sets him apart is his creativity and deep understanding of a codebase. He’s uncovered 34 solo high-severity issues and 65 solo medium-severity issues, which is essentially unheard of.
xiaoming90 is more than an auditor—he’s a stalwart of blockchain security.
Please congratulate xiaoming90 on this new role.
Xiaoming90 retweeted
🏆 @usualmoney Audit Contest Results 🏆
Congrats to:
1. 0xmystery, @0xNirix, @0x_0x37, @KupiaSecurity, @xiaoming90, @zarkk01, Bigsam, dhank - 4,367.29 USDC🥇
2. @niroh30, LZ_security, PeterSR, ke1caM - 3,354.08 USDC🥈
@xiaoming90 made 21,500.00 USDC fixed pay + 4,367.29 USDC from the contest pot!
87,000.00 USDC rewards ➡️ $12.4M+ paid out in rewards.
🚨 New contest: Usual V1 @usualmoney 🚨
Sign up here: audits.sherlock.xyz/contests…
Total Rewards: 89,000 USDC
nSLOC: 3312
Lead Senior Watson: @xiaoming90
Starts Tuesday, October 29th at 15:00 UTC
Check it out!!
Xiaoming90 retweeted
🏆 @symm_io Audit Contest Results 🏆
Congrats to:
1. @xiaoming90 - $15,000.00🥇
@xiaoming90 made $9,000.00 fixed pay + $15,000.00 from the contest pot!
$26,000.00 rewards ➡️ $11.8M+ paid out in rewards.
🚨 New contest: SYMMIO v0.8.4 Update Contest @symm_io 🚨
Sign up here: audits.sherlock.xyz/contests…
Total Rewards: 26,000 USDC
Previous Scope nSLOC: 5057
Update Scope nSLOC: 723
Lead Senior Watson: @xiaoming90
Starts Wednesday, October 2nd at 15:00 UTC
Check it out!!
Xiaoming90 retweeted
Was great working with the @TokemakXYZ team and @xiaoming90 on this one
Replying to @autopools
Crowd Competition
Working @sherlockdefi, Autopilot’s codebase underwent a crowd competition that combined a traditional audit, led by @xiaoming90 (Lead Watson), with a crowd-sourced approach.
Crowd competitions offer a complementary level of scrutiny to the review process.
Xiaoming90 retweeted
Replying to @sherlockdefi @xiaoming90
Thank you @sherlockdefi and thank you @xiaoming90 🤝 Great experience and a great Watson.
Xiaoming90 retweeted
Crowd Competition
Working @sherlockdefi, Autopilot’s codebase underwent a crowd competition that combined a traditional audit, led by @xiaoming90 (Lead Watson), with a crowd-sourced approach.
Crowd competitions offer a complementary level of scrutiny to the review process.










