Ambargo | Web3
@0xambargo
Followers
153
Following
200
Media
13
Statuses
205
Smart contract security audits | Founder of Avcisec
web3
Joined September 2024
Inspired by @Al_Qa_qa Web3 security tutorial, we've created our own story-driven security challenge with Lending/Borrowing protocols!. specifically made for security vulnerabilities of Lending/Borrowing Protocols. Like his bank series, our challenges are interconnected - each.
🚨 Alert to All Web3 Security Researchers. I have made a simple tutorial for newbies Web3 security people, it is like a CTF but it differs a little bit. Instead of making independent challenges, I made challenges dependent on each other, where the first challenge should be.
3
2
29
THE BEST WAY OF LEARNING SMART CONTRACT AUDITING IN 2025. > Info -> @CyfrinUpdraft.> START CONTESTS ASAP.> NEVER IGNORE CODES YOU DONT UNDERSTAND.> ALWAYS study your missed bugs.> QUESTION EVREYTHING.
@0xambargo How do you get into web3 auditing? Is there a course you would recommend taking?.
0
0
2
This is not satire post. and i made far more than that but in none of them i audited less than a day.
1
0
0
I literally audited 2 hours for this contest and got paid ~700$ . While doctors in EU make 48€ per hour and they study for YEARS . I know its nothing compare to what legends make in cantina. But the point is efficiency is the key to financial freedom
Congrats to the winners of the @Daosis_Official audit competition🔥. Time to claim your rewards💰 and to shout out to the amazing ecosystem for a great audit!. Winners breakdown🏆. @johny7173 - 1 High, 3 Lows.@chainNue - 1 Medium, 2 Lows.@AresAudits - 6 Lows.@0xambargo - 6 Lows
1
0
3
I think most of the best performers usually tend to learn things way before they going to use it And when the right time comes they are ready to beat everybody in the competition.
Repeat after me:. DO NOT STUDY THINGS THAT YOU DO NOT NEED RIGHT NOW.
0
0
1
Great idea I already tried making something similar but in GitHub The problem with creating this is its really time consuming because you need to create unique code base from scratch in-order to simulate that puzzle and make sure the only bug in there is.
I suggest someone make a site that resembles chess puzzles, but for web3. Find the bug in the code. And have them sorted by difficulty. Sounds cool.
0
0
3
Actually i was impressed by the test writing abilities of Claude for smart contracts like it really saves a lot of time.
I just found a confirmed bug on @immunefi .BTW, I used Cursor AI to help me write the PoC this time, and I found it useful. I think the AI won't help you find bugs, but it will help you test bugs more efficiently. #immunefitribe
1
0
3
Before its too late LOCK đź”’ tf IN and just work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work work.
0
0
12
We’re back with a brand-new game 🎉. This time, we’re diving into Lottery Protocols and the security vulnerabilities they bring! 🪙🎰. Much like before, each level is story-driven and interconnected. Solve one challenge to unlock the next and deepen your understanding of Web3
Inspired by @Al_Qa_qa Web3 security tutorial, we've created our own story-driven security challenge with Lending/Borrowing protocols!. specifically made for security vulnerabilities of Lending/Borrowing Protocols. Like his bank series, our challenges are interconnected - each.
1
0
3
I asked grok that would it save a project in Ethereum getting hacked for $10M or project in Solana getting hacked for $15M . it literally said save the Ethereum. AI KNOWS
0
0
4
I call it part of the game
0
0
4
Only those who went trough auditing really well know for a fact that auditing is not get rich quick scheme at all. In fact it has the most complex mindset route . You can learn most things by watching YouTube videos but there is no amount of @CyfrinAudits or @0xOwenThurm videos.
Becoming a web3 security researcher is not another get rich quick scheme. It is a long-term investment that will take a lot of time, nerves and effort, but it will be worth it, because in the end the qualities and skills you will possess will be valued very dearly. If something.
0
0
10
Humans are biggest attack vector. Imagine spending hundreds of dozens of $ on security audits and then this happens. .
Another hack seems to have happened :( . This time @tapioca_dao. It looks like the vesting contract ownership was transferred to an exploiter, who then emergency-released all vesting tokens. What is going on the past few days, damn!
0
0
1
web3 security twitter used to be more active .data coming from every single window forcefully . even if you didn't want still you would learn new thing every single day . why is now everyone so silent or just posting memes fr seriously what happened. we need more posts .we.
3
0
5
We have created special private group only for protocol teams . Who want:.• To have better security for their protocol .• How wants to select best auditor for their budget .• the perfect auditor for their goal.• to know which security route they should go .• to hear.
0
0
2
i had friend working at famous web3 security auditing company he told me these . they audit ~300 SLOC under 10 min .they always have that sense of rush (pushed by company) in auditing to just get to the next work (we know how these kind of rush impact quality of audits). now.
1
0
2
protocol teams can get best advice on where to get audits from web3 security auditors . here is how: . Most good auditors almost gave try to all the contest platforms and been in the game, the experience of working as auditor gave them idea of what's the best solution technically.
0
0
1
When you want to participate in Web3 audits contests don't join all of them . Participating in all the contests aren't going to save you or give you extra power. In fact it reverses your progress and you'll get 0 results . Think about finding the most high ROI contests for.
1
0
1
Most web3 protocols act strictly about Out Of Scope bugs when they get audits . But you most not forget you'll pay 10x of it in bounties . So why not get full audit for little bit more investment and not paying high 5-6 figure bounties . Make it make sense.
1
0
2