carrotsmuggler
@CarrotSmuggler
Followers
784
Following
5K
Media
27
Statuses
103
Poking holes in smart contracts Portfolio: https://t.co/yXxkrezUzf
Joined January 2023
To demonstrate @burraSec's expertise, we’re offering a free full-day security review/consultation for projects integrating with LayerZero or Arbitrum—whether you’re already deployed or still in development. We’ll thoroughly review: LayerZero: Configuration (DVNs, Executor, and
💡I’ve been asked numerous times to provide a checklist for auditing a LayerZero integration. ⚡️You asked, so here it is: https://t.co/bAdgQSpjlm 🧠 I’ve dumped everything I could think of that can go wrong and more. @g_vladika spent years building and breaking the core
4
138
196
Crazy how you can get paid to learn completely new things. Won my first cosmwasm audit attempt thanks to @code4rena
8
2
120
Eternally grateful to all the people I have crossed paths with in this space. Some of the sharpest and smartest people I have ever met were at the DSS conferences. I owe ALL of my progress to others since it's their work I studied and skilled up with.
1
0
17
The point of this thread is that different people take different amounts of time. Some make it from day 1. For others (like me) it takes 2 years. If you stick to it, wonderful things happen. This isn't a sprint, its a marathon, so treat it like so.
1
0
20
I racked up quite a few findings to date. This took a LOT of time. First 4 digit payout was in month 3 First 5 digit payout: month 12 Cumulative 6 digit earnings: month 19 And then, everything got so much easier all at once. Haven't reached 7 yet, but making serious progress
1
0
14
After spending a lot of time reading reports and learning, I started seeing some success in early 2024. This was when I started winning a few contests. The tallest bar in this monthly earnings graph, was 80% of my yearly salary before starting.
1
0
8
In 07/2023 I gave my notice at my job, took my pending vacation days and started working in web3 full-time. I had racked up ~$15k in winnings till then. This was already my 10th month in the scene. I focused on putting in the hours, and the $ slowly followed.
1
0
7
Here are my audits/month. 10 in a month might seem a lot, but a lot of them are small scopes and contests that I speedran through in a day. I thought participating more would bring better results, but it didn't. But it did expose me to a lot of different codebases early on.
1
0
9
Till 2023, I worked as a PhD student, for a salary of $60k. I dropped out 4 years through my course since I didn't see a way to the end. I had dabbled in a few contests by that time but only over weekends for fun. I logged EVERYTHING, so here's a bunch of graphs for you
1
0
7
Twitter SR space is full of flashy wins and overnight success. So I decided to share my slow painful grind over the last two years of my life. I don't really like talking $$ figures, but I think some are needed to put things in perspective. A🧵
15
10
189
When we say crypto takes security seriously, this is what we mean 🪐 @Eigenlayer is relentlessly pursuing the pinnacle of security standards with the largest-ever, $2,500,000 code review competition starting in February. More info coming soon.
18
64
469
The biggest bug bounty in history is now live. @Uniswap just raised the standard of building in public 🪐 With $15.5M on the line, it's an unprecedented testament to the rigorous security of v4. Think you can find a critical bug? Give it a shot. 🔗 Bounty link below
21
73
365
An ultimate guide to selling audits and finding new customers Inside: Best practices, Secrets to finding leads and finding more customers 🧵👇
9
18
140
