Art Of Auditing
@ArtOfAuditing
Followers
746
Following
144
Media
0
Statuses
174
https://t.co/fhaBbzvj5W | authored by the amazing auditors of the web3 community | compiled & maintained by @xb0g0
World
Joined December 2024
Click the 🔔 to receive your daily dose of AUDITING wisdom🧙♂️
Starting today @ArtOfAuditing has become x10 more valuable. Currently being the only resource to compile the hard acquired ALPHA of many skilled auditors, I felt we need to maximize its value. 💪I finally found the time to do it. Starting today, you'll be receiving your daily
0
1
9
🧙♂️Wise sage @xuwinniexu once sad: 🧠 CRITICAL THINKING 📜 "Don't read other's reports without independent thinking first."👇 https://t.co/amlC8f6icF
web3-sec.gitbook.io
0
0
10
🧙♂️Wise sage @J4X_Security once sad: 🧠 CHECK FOR 3 SIGNS THAT WILL TELL YOU THAT THIS IS A GOOD CONTEST TO DO: 📜 "New language / protocol typeComplex MathGigantic codebase"👇 https://t.co/nmwlkgUeaO
web3-sec.gitbook.io
0
0
3
🧙♂️Wise sage @windhustler once sad: 🧠 Breaking Versus Understanding 📜 "Focus on breaking the codebase rather than understanding it. Many bugs are slight logical inconsistencies that don’t even require understand..."👇 https://t.co/eF2XndJn4d
web3-sec.gitbook.io
0
0
11
🧙♂️Wise sage @zigtur once sad: 🧠 Setup that feedback loop 📜 "Failing by missing vulnerabilities is normal. You can’t do without it.But failing multiple times on the same issues is not acceptable.Get that feedback loo..."👇 https://t.co/UcQZ4gseJY
web3-sec.gitbook.io
0
1
9
🧙♂️Wise sage @bobface16 once sad: 🧠 How to improve your skills 📜 "Theoretical knowledge is important, but nothing trumps practical experience. Develop your own projects and observe areas of security concern, parti..."👇 https://t.co/XwQivlrdrV
web3-sec.gitbook.io
0
0
14
🧙♂️Wise sage @EgisSec once sad: 🧠 Don't stop until you have achieved your goal 📜 "If your goal is to uncover a high-severity bug in the X codebase and you're committed to it, your focus will naturally guide you towa..."👇 https://t.co/x0jfQp37Pc
web3-sec.gitbook.io
0
1
5
🧙♂️Wise sage @0xadrii once sad: 🧠 Have patience and learn from each contest 📜 "Although it might seem that the auditing part of the contest brings you the most learnings, it is in the escalations and results phase w..."👇 https://t.co/lNdBKw3X3X
web3-sec.gitbook.io
0
1
14
🧙♂️Wise sage @0xb0g0 once sad: 🧠 Go deeeeep 📜 "This is where unique and less duplicated findings hide. If you stay on the surface, where everyone else is, you'll uncover the same issues as everyone else.But if you're..."👇 https://t.co/CO3RTIOkHs
web3-sec.gitbook.io
0
0
4
🧙♂️Wise sage @pks_ once sad: 🧠 When identifying a potential vulnerability: 📜 "Thoroughly review the attack path firstly.Take a break, then review it again with fresh eyes.If the vulnerability still holds after double r..."👇 https://t.co/EFaVXQ3w4J
web3-sec.gitbook.io
0
0
3
🧙♂️Wise sage @NonseOdion once sad: 🧠 Mitigations are a good place to start looking for bugs. 📜 "A mitigation can fix a bug, partially fix a bug, not fix a bug or expose another vulnerability in the code. It can a..."👇 https://t.co/eWsk2Ilro4
web3-sec.gitbook.io
0
1
3
🧙♂️Wise sage @m4rio_eth once sad: 🧠 The most complicated bugs are the simplest 📜 "Sometimes we have the urge to try to come up with very complicated/weird edge-cases forgetting to approach everyone from first prin..."👇 https://t.co/vk7ocYw8IB
web3-sec.gitbook.io
0
0
9
🧙♂️Wise sage @zzykxx once sad: 🧠 There's always (and I mean always) another bug 📜 "Most of my decisions regarding an audit are based on this one-liner, for instance I never quit before the time is over and I rarely f..."👇 https://t.co/LT88yIxKRF
web3-sec.gitbook.io
0
0
8
🧙♂️Wise sage @saidamdev once sad: 🧠 Never accept protocol design decisions without question 📜 "Always ask why they were designed and implemented that way. I have seen unique findings that aren't immediately apparent in..."👇 https://t.co/B267pKM9MJ
web3-sec.gitbook.io
0
0
1
🧙♂️Wise sage @__nnez once sad: 🧠 CHOOSE YOUR TARGET WISELY 📜 "It doesn't matter how fancy the bug is - if the project you chose doesn't pay you, nothing matters. Choose wisely where you want to put your effort."👇 https://t.co/JxY2J7zQOj
web3-sec.gitbook.io
0
0
11
🧙♂️Wise sage @Haxatron1 once sad: 🧠 Be organized in your approach 📜 "I like to keep track of contracts I have reviewed, so that I don't miss out on anything and it is easier for me to do a systematic review of all..."👇 https://t.co/syOT2QDOyF
web3-sec.gitbook.io
0
0
14
🧙♂️Wise sage @akshaysrivastv once sad: 🧠 For newbies: Do shadow audits 📜 "Do shadow audits. Choose any past audit with small codebase and try to find bugs in it, then compare your found bugs with the actual..."👇 https://t.co/SRR4CcxtmQ
web3-sec.gitbook.io
0
0
5
🧙♂️Wise sage @EgisSec once sad: 🧠 Focus is your best ally. Make sure you know how to work well with it. 📜 "What sets the best researchers apart from the average ones is their ability to focus and the time they spend..."👇 https://t.co/x0jfQp2zZE
web3-sec.gitbook.io
0
0
10
🧙♂️Wise sage @0xjuaan once sad: 🧠 Transact with the protocol in different ways 📜 "A great way to understand a live protocol at a high level is to just transact with it in different ways (via the frontend), and then..."👇 https://t.co/QmDH8dRv7l
web3-sec.gitbook.io
0
0
11
🧙♂️Wise sage @gjaldon once sad: 🧠 The larger the audit scope and the more complicated the protocol, the more critical your notes will be. 📜 "Note-taking is a skill that also needs to be developed to be great at audi..."👇 https://t.co/uIpHNcCOWB
web3-sec.gitbook.io
0
0
12
🧙♂️Wise sage @bahurum once sad: 🧠 Go for the kill 📜 "For time efficiency while hunting, concentrate on critical paths and assets, while leaving aside secondary assets. Understand the risk model of the project to dec..."👇 https://t.co/EeiFa1eHD4
web3-sec.gitbook.io
0
0
4