Usman
@0xusmanf
Followers
583
Following
4K
Media
31
Statuses
2K
👨🏻💻 Solidity dev | 🥷 Security Researcher @CodeHawks | 🏅 SSCD+ and QWS certified by @CyfrinUpdraft
Joined October 2012
I'm extremely proud and excited to share that I'm now officially SSCD+ certified by @CyfrinUpdraft Thank you @PatrickAlphaC and @CiaraNightingal for making this possible, you are the best teachers ever. #SSCD+ #CyfrinUpdraftCertified #rETHdev
34
7
165
Every web3 beginner “knows” security matters, but it’s easy to lose sight of where the real problems come from. 🧵
2
4
21
looking at this year's SEAL 911 tickets, I can confidently claim that our industry is inherently unsafe, and the situation is getting worse each year, not improving. We're doing such a bad job, in particular when it comes to self-custody and private keys / seeds.
35
25
244
Web3 security at ecosystem scale requires resources & every contribution matters. SEAL 911, Safe Harbor, Frameworks, and our threat intel serve thousands of projects, but they're sustained by a fraction of those who benefit. Help us continue protecting the community in 2026:
12
18
67
@ethereumfndn’s Trillion Dollar Security initiative just laid out the blueprint for securing the ecosystem’s future. Here’s how Cyfrin is addressing the critical security challenges identified by @ethereumfndn 👇
1
1
6
After 2 years working with @cyfrin and building out a lot of core infrastructure I am looking for my next fullstack role. I worked at Amazon, Apple, then started working in Web3 about 4 years ago and it would be awesome to stay in the space. https://t.co/SMeKdwPgnR Projects
7
10
55
She summarized everything you need to know from the "AI Engineering" book in 76 minutes. If you don’t have time to read the book, watch this video. Foundational models, prompt engineering, evaluation, RAG, memory, fine-tuning, and more. Great starting point.
10
8
103
Recent private audit client was thinking about launching fast after an audit by another firm produced only 1 Crit. But they postponed the launch after our on-going audit produced 6 Highs and counting! The last audit before mainnet should feel like it wasn't worth it.
3
2
74
Aztec is the first stage 2 L2 on Ethereum PLUS it has programmable privacy baked in 🩷 There are lots of differences between Ethereum and Aztec, so I have collated everything you need to know to get started developing on Aztec into one video 👇 https://t.co/BLVJIcuJuZ
16
21
139
Success usually comes from 1000 minuscule victories, not 1 big break. Find a way to get a single tiny victory every day: - 1 hour of training - 1 hour of coding - 1 hour of reading - 1 hour of therapy Overnight success takes years to happen. Take your time and keep grinding.
14
10
108
SEAL Intel's new write-up covers 'Crypto Drainer' operations utilizing the impersonation of thousands of official protocol support channels on Telegram. We detail the automated social engineering, methods, and the scale of the operation
2
9
22
Balancer and Yearn are wake up calls. We need to get our shit together as an industry. The black hats aren't waiting for us to figure it out. They are ramping up their efforts.
5
14
116
| ̄ ̄ ̄ ̄ ̄ ̄ ̄ ̄ ̄ ̄ ̄ ̄ ̄ ̄ ̄ ̄| Don’t push your private keys on GH |________________| \ (•◡•) / \ / —— | | |_ |_
28
21
164
STOP!!! WARNING!!! If you manage a significant amount of money on-chain and don’t know how to spot malicious transactions, STOP. Go to @cyfrinUpdraft and learn before it's too late. Next transaction can drain all your funds, ACT NOW!!!
How do wallets get drained? 💀 Unchecked assumptions, thinking the tx looked fine, trusting the interface. Updraft’s Web3 Wallet Security teaches you to: - Decode calldata and identify malicious txs - Verify @Safe{Wallet} transactions - Understand EIP-712 👇
3
1
13
Indians are some of the kindest, most generous, and genuinely welcoming people I’ve ever met 🇮🇳
23
5
152
CCA, powered by @Uniswap is a new, fairer auction mechanism that allows new assets to seed liquidity and discover a fair market price. @aztecnetwork is using CCA for their token auction to distribute ~15% of the token supply in a transparent and verifiable manner I’ve created
23
44
206
YouTube is free. Google is free. ChatGPT is free. Cyfrin Updraft is free. In 2025, you can literally kickstart your career in 6 months. You just need a laptop, internet, and consistency.
26
14
122
STOP!!! WARNING!!! If you manage a significant amount of money on-chain and don’t know how to spot malicious transactions, STOP. Go to @cyfrinUpdraft and learn before it's too late. Next transaction can drain all your funds, ACT NOW!!!
How do wallets get drained? 💀 Unchecked assumptions, thinking the tx looked fine, trusting the interface. Updraft’s Web3 Wallet Security teaches you to: - Decode calldata and identify malicious txs - Verify @Safe{Wallet} transactions - Understand EIP-712 👇
3
1
13
seeing folks change their pfps to that of a girl has me wondering: do we really think this is a spark that needs more fuel? do we think this is just a fun social experiment with zero subconscious repercussions for women’s contributions in this industry? we’re light-hearted as
I’m changing my profile pic to a girl Currently at 188 followers. Let’s see where i’m sitting at the end of the year. Only the OGs will know. Now waiting for the magic.
5
1
25