dimulski
@dimulskiatanas
Followers
659
Following
2K
Media
51
Statuses
348
Web3 Security Researcher 🕵️ | 50+ H/M vulnerabilities found 🎩 | DM for audits 💼
Joined January 2018
🎉 Ranked 17th on the @CodeHawks all time leaderboard (as of 14/03/2024). Have to put in the hours for the top 10 🫡!
4
2
56
🚨Recently, I had the opportunity to discuss a critical vulnerability in a reward distribution protocol. Additionally, we discussed best security practices to prevent critical vulnerabilities in live protocols. Watch the video below to make sure you follow them! 👀.
1
0
14
In the beginning of December I helped secure the Vyper Boost protocol. It was a great pleasure working with @CDSecurity_, and partnering with two other amazing auditors! The code was very well written however we still managed to find 3 mediums. Check out the report 👇.
Another audit completed! 💥. The Vyper Boost protocol is the revolutionary perpetual system that makes the Vyper ERC20 token hyper deflationary. Check out the full report in the comments! 👇
0
0
18
RT @dimulskiatanas: Managed to get 4th in the recent Debita contest at @sherlockdefi . The new judging system seems to be working pretty fa….
0
1
0
Managed to get 4th in the recent Debita contest at @sherlockdefi . The new judging system seems to be working pretty fast and accurately. Well done @sherlockdefi 🫡! Sadly I spent only about a week on the contest and was too scared to compete for points, and most probably missed
16
1
94
RT @dimulskiatanas: 🎉🎉Placed 2nd on the @Corkprotocol competition in @sherlockdefi. Very interesting protocol -> selling insurance for depe….
0
1
0
🎉🎉Placed 2nd on the @Corkprotocol competition in @sherlockdefi. Very interesting protocol -> selling insurance for depeg events. Managed to find a couple of solo issues, however missed things that I shouldn't have. On to the next one 🫡!
17
1
89
RT @dimulskiatanas: I really like the secret name @sherlockdefi assigned to me in the Flayer contest 🤭🤭.
0
1
0
The @winnnables escalations ended yesterday, and the @Corkprotocol escalations also began yesterday, and this codebase is more complex (I forgot what the code does). I wanted to prepare for the @KakarotZkEvm contest but now it looks like we will have an escalation war until
1
0
13
RT @dimulskiatanas: Placed 6th on the @winnnables contest. Escalations on this one took more time than the audit itself, sadly I lost 😢! Co….
0
1
0
Placed 6th on the @winnnables contest. Escalations on this one took more time than the audit itself, sadly I lost 😢! Congratulations to the winners 🎉🎉! Learned from what I missed, on to the next one🫡!.
@winnnables @mngyuknn1 @0xSimao 🏆 @winnnables Audit Contest Results 🏆. 4. @kuprumion - $646.40.5. @demorextess - $515.87.6. @dimulskiatanas - $288.00.7. @0x0bserver - $287.24.8. @zhaojohnson37 - $285.43.9. @bri_samed - $257.96.10. @Shahil__Hussain - $253.37.
4
1
19
I am going to miss this one 🥲.
Although I have participated in several escalation wars, apparently I have never done it on @sherlockdefi. So they decided to give me a badge for it 😈. Strange thing how only 7.61% of watsons have escalated an issue.
0
0
6
🕵️ I think there should be a new rule added to the judging rules of @sherlockdefi - wardens and judges are required to use logic and common sense. It is astonishing how many people don’t just because it isn’t a rule!🤔.
0
1
19
This week I have been participating in 3 separate escalation wars. Not a great feeling, waking up to 10 emails regarding escalations feedback. Can I also do some auditing pls🧐🤔?
2
0
27
I haven’t tweeted in a while, as I was purely focused on audits. However I would like to take the time to thank @code4rena for creating the best judging system, there was, is, and will be! I want to state that judges are not biased at all! And making the whole “PJQA” private is.
2
0
33
🚨🚨A lot of scammers lately are targeting security researchers with this type of attack. They start by saying they have a repo that needs to be audited, and make you download it, then your wallets get drained. I almost fell once to this. Stay vigilant!! Thanks for the detailed.
Crypto folks (hopefully) already know that Lazarus is one of the most prevalent threat actors targeting this industry. They rekt more people, companies, protocols than anyone else. But it's good to know exactly how they get in. Bc another smart contract audit won't save you.
2
1
16
