alix40
@AliX__40
Followers
2K
Following
3K
Media
46
Statuses
869
Joined May 2022
I've been cookin' quietly the past few months. As a security researcher, I kept running into the same thing:.- Solo audits are valuable, but overlooked. - No infrastructure. No visibility. No incentive for anyone to fix it. I think it's time we make solo audits mainstream.
4
3
97
We need more awareness!.
šØAnalysis of Extension Confusion Attack:. Recently there has been rise in "malicious extensions" which are draining crypto wallets. And how top extension names like Solidity and Hardhat came in leading to a known small heist of $500k ;). Let's analyze the core reason behind it.
0
0
3
> 20+ legendary SRs are already locked in and fully behind the vision. And I havenāt even made the public announcement yet. This is gonna be huge šš.
Some things in Web3 security should just exist. - Not because theyāre lucrative,.- but because the whole ecosystem is better when they do. This oneās a public good. Every solo auditor will want it. ā³ 7 days.
3
1
35
The Web3 space is evolving!. After multiple years working in both Web2 and Web3 security, Iāve seen too many protocols spend millions securing onchaināwhile ignoring Web2 infraāand get drained. Now teaming up with the chads @0xaudron & @hunter0x7 at Valkyri to offer full-stack.
šIntroducing Valkyri: Full Stack Web3 Security firm :š§µ. 1. Security doesn't start onchain, it starts at the foundation. Valkyri is here with new approach on a mission to protect Web3 protocols from the ground up from Web2 infra to smart contracts!
5
1
43
Some things in Web3 security should just exist. - Not because theyāre lucrative,.- but because the whole ecosystem is better when they do. This oneās a public good. Every solo auditor will want it. ā³ 7 days.
I've been cookin' quietly the past few months. As a security researcher, I kept running into the same thing:.- Solo audits are valuable, but overlooked. - No infrastructure. No visibility. No incentive for anyone to fix it. I think it's time we make solo audits mainstream.
4
1
53
I might be crazy, but hear me out:. Instead of offering a $2M conditional pot for a very secure codebase, why not run a fixed-pot contest with one intentionally hidden, very hard-to-find bug?. Now top SRs know thereās definitely something to find. EV is real. Everyone tries hard.
5
2
29
This year, Iāve completed several solo audits for lending protocols. I genuinely believe this audit model is efficient, more focused, and a better option for many teamsābut itās currently not mainstream. Should we change that?.
1
1
26
Iāve seen web2 bug bounty platforms ban security researchers just for sharing personal opinions on Xāpolitics, drama, or critiques of other companies. In web3, we donāt really have that, and I hope it never starts happening here.
0
1
43
The audit competition platform to use AI effectively to detect spam/llm generated reports, is going to have a very strong market advantage.
4
0
26
I have been off X for quite a while, where did all the Audit Contest fkn go?.
10
0
43
Invest in what you know!. I spent 4 years investing in stocks with my best yearly ROI being just 0.3% (-50%, -15%, -3%, 0.3%). Then, I switched to investing in DeFi projects I personally knew and audited. The gains have been life-changing.
2
0
39
his year, Iām committing to attending 4 Web3/Web3 security conferences or events. Any recommendations? š.
4
0
23
End of Dec '24, I speed-ran 4 contests in 5 days. šāāļøš». After a year in web3 security, this was my first time trying it. Normally am against speed-running, but I wanted to test myself under pressure and improve efficiency.
3
0
47
RT @GalloDaSballo: Whatās an Invariant?.How do you write them?. A collab between @nican0r and @alcueca.
0
7
0
If you could start your auditing journey over from scratch, what would you do differently?.(no bs alllowed).
5
1
39