Dacian
@DevDacian
Audit Team Leader @CyfrinAudits Protected $40,000,000,000+ on-chain TVL! DM for Cyfrin private audits!
1 Hour with @PatrickAlphaC where I cover: 1⃣ how I break down stateful fuzz testing by invariant types and contract lifecycle 2⃣ my favorite general heuristics which I use to find all sorts of bugs in many different codebases 3⃣ mindset and ultimate recipe for success Link👇
Collect ‘em. Flex ‘em. Share ‘em. ✅ Badges and achievements are now live on Updraft: - Earn them for completing courses and lessons - Grow your learning streaks - Pin them to your profile - Showcase your skills - Build a portfolio of progress 👇
Admin functions are often overlooked by both devs & auditors: * devs don't test them anywhere near as much as regular functions since they are designed to be infrequently used and because "admin is trusted" * auditors especially those trained by competitive audits tend to…

Cyfrin is thrilled to be selected as a security partner for the @Arbitrum Audit Program. We’re excited to support Arbitrum builders in strengthening their security and deliver amazing experiences for their users. Thanks to @aboutlo and the entire team! 👇
Another step forward for Arbitrum ecosystem security 🛡️ The Arbitrum Audit Program Committee has whitelisted the first batch of top-tier audit firms, after a careful selection process (and 100+ hrs of due diligence), kicking off the deployment of 30M $ARB to support @arbitrum…
Shout out @TamayoNft & myself for amazing output on this 6-day audit of a very interesting on-chain game! This codebase had a good test suite with >90% coverage but by thinking "outside the box" using an attacker mindset we found: * 3 Critical * 5 High * 9 Medium * 7 Low * 14…

This is awesome. 👏
I made a 🦊 wallet plugin that: 1. Decodes your calldata 2. Uses that decoded data as input to an AI 3. Which then searches the web to see if the transaction has anything "fishy" about it. Here is an example where you'd be sending money to the ByBit hackers, but it catches it!
When examining a function, ask what is being assumed but not validated: 💥preconditions (existing state) ? 💥relationships between inputs ? If a function only assumes but not validates, you can likely find some great bugs!

Level up your developer skills, learn Rust Programming Basics on Updraft 💪🚀 Progress from novice to intermediate Rust developer in @ProgrammerSmart’s 4-hour course. Set the foundation to build Rust-based smart contracts and dApps on Solana or using Arbitrum Stylus. 👇
Very cool seeing @CyfrinUpdraft courses on @ethereum developer page!

Devs cooked a Bunni Hooklet for making swap fees adjustable after pool creation! Thanks @CyfrinAudits for your help auditing the code! github.com/Cyfrin/cyfrin-… Read more about the power of Bunni Hooklets here docs.bunni.xyz/docs/v2/concep…
We are looking for a junior (entry level) marketer to join the Cyfrin team! Someone who is active on social media and looking to go deeper into the blockchain world :) github.com/Cyfrin/OpenPos…
> Only people who have finished the @CyfrinUpdraft full stack course please. It starts locally for now, then you’ll see recruiters asking for certificates.
Looking for a dev to work on a small grant to make a small but mighty web3 website. Only people who have finished the @CyfrinUpdraft full stack course please. Post your GitHub with proof you’ve completed the full stack course here if interested please, thanks.
All good for now, thank you to everyone that reached out!
💡Seeking web2-style penetration tester with some web3 knowledge💡 Can you: ❎do web2-style penetration testing & infrastructure reviews ❎perform systematic web-security testing—API penetration tests, header-parsing bypass checks, RBAC validation, SQL-injection probes &…
💡Seeking web2-style penetration tester with some web3 knowledge💡 Can you: ❎do web2-style penetration testing & infrastructure reviews ❎perform systematic web-security testing—API penetration tests, header-parsing bypass checks, RBAC validation, SQL-injection probes &…
Looking for a dev to work on a small grant to make a small but mighty web3 website. Only people who have finished the @CyfrinUpdraft full stack course please. Post your GitHub with proof you’ve completed the full stack course here if interested please, thanks.
it is virtually impossible to complete all Cyfrin courses without getting sidetracked by the opportunities they make possible