misbahu | Nominal
@Designer_Misbah
Followers
2K
Following
5K
Media
287
Statuses
2K
smart contract hacker | ex @KannAudits | building @Nominal_ID on @base | BD to @josh_my_man | building @zetahash_xyz on @hedera | DM 4 security audit
Onchain
Joined January 2022
This hacker got free $500k from a single bug on ERC404 On February 14, 2024, the MINER project, built on the experimental ERC404 standard, was exploited for 168.8 ETH, roughly $470,000. The hack was possible due to a misimplemented transfer function in the projectโs ERC-X
11
52
431
Yawan irin wadannan tambayoyin sune dalilin bude TrustChain Academy. Yanzu idan nace zan zauna koyar dashi wannan abun da ya bukata how long zai daukemu? Sannan at thesame time masu irin wannan tambayar suna dayawa, wasu da gaske suke wasu kuma kawai latsawa ne suji idan abun
16
3
67
Is this you? ๐
0
0
0
This morning we received a great and helpful feedback for our @base Batches 002 Build submission. We will use it to make @Nominal_ID the meta. Thanks @Sir_Damilare, thanks @base.
2
0
7
Phishing has no structure. So, the way the social engineer will approach you is unknown until they do. Plus, attackers have different IQ levels just like white hat SRs.
0
1
7
If you dive deeper into Blockchain you come to realize "crypto" is just a fancy name. Everything is web2 collected together. Computer science is cool.
0
0
1
Setting up P2P is not easy if you didn't have good network knowledge.
0
0
0
I once worked on one PoC for 5 days straight. I felt dumb.
3
0
2
So far, the below statement is no longer a theory in the industry. Have some third party eyes on changes before you deploy. "added changes post-audit, and since security reviews are never cheap, the changes were not reviewed, so vulnerabilities have slipped."
The honest story of a project hack in web3, told by a dev with good intentions. Sharwa got an audit from Pashov Audit Group more than a year ago. It was a strong audit - 4 security researchers found many vulnerabilities and helped the team patch them. Unfortunately, Sharwa's
0
0
1
Last month, we launched nominal on @base Sepolia testnet. You can try the app at https://t.co/98GrCJDgks and give us feedback at: https://t.co/1xM6HPyBHW thank you
0
0
1
And, if you see a function with no visibility specifier, then it is public by default.
Solidity functions can be public, external, internal, or private. They look similar, but behave very differently. Here's a quick way to remember which is which ๐๐พ
2
0
6
When you start bug bounty hunting this October, to pay your rent on November.
4
1
15
If you are a beginner who fears AI will replace him, AI will replace you. - AI was created by man - Man was created by God... You are only not using your intelligence well. Leverage AI. Learn and be better than AI. DM I will guide you.
3
3
41
Stop praying your contracts are safe. Most teams deploy contracts with hope that auditors would have caught it. But not all auditors should have that trust. Our audit first will give you nightmares, then fix them. @josh_my_man proved it countless times. DM me now to set up scope.
0
0
9
Researchers who spam the contest channel with questions that are answered in the readme are NGMI! You already lack the main personality trait that all successful security researchers have, and you did not even attempt to answer your own question before seeking help.
1
2
15
For anyone wondering wtf this picture means. It means learning more and talking less
@0x45o I was talkative. I wanted to talk less, and I did change when I started using this profile picture. People like me know that you can't learn a lot if you talk a lot. You learn a lot when you keep quite
0
0
6
dear X algorithm, show this post to the people who: - are tired of copy and paste everytime they want to receive crypto payments - are waiting for the new world, where your single username can be used to receive crypto on any wallet and any chain. thank you.
0
1
3
Last month, we launched nominal on @base Sepolia testnet. You can try the app at https://t.co/nyJaBegJsU and give us feedback at: https://t.co/1xM6HPz9xu thank you
Web3 still makes people copy-paste long addresses across chains. Errors, friction, drop-offs. But donโt fret, weโre fixing that.
0
2
5
Codex keeps repeating the same mistake for different tasks. Google Jules adapt to your corrections. Who else used Jules?
0
0
1