AV_
@_avoloder
Blockchain Dev and Security Researcher 🧐
This is what true leadership looks like. Enormous respect to @immunefi for stepping up and taking care of the involved SRs, as well as all SRs in general. Thank you! 🫡
Statement: A. Spectra Finance contracted with Immunefi to run an Audit Competition. Per our process, Immunefi provided Spectra the program draft that included the reward structure and linked to our standard competition reward terms. The Spectra team, including their CEO,…
You must identify the engagement farming on this platform and stop interacting with it.
Scheduled a small private Solana audit for next week. 🤝🤝 Pretty excited about it
Love to see it. Thanks @PatrickAlphaC and the team!
You asked. We shipped. Solodit UI update: 🔍 Filter findings by Solidity, Rust, Cairo, and other programming languages 📄 Toggle Compact mode to view more vulnerabilities at once Faster scanning. Smoother research.👇
No caption, pure alpha drop, have fun reading write-ups to level up: github.com/sayan011/Immun…
I was thinking that for auditing (not coding) DeFi protocols, a financial background might be more beneficial than a technical one. The technical knowledge required to understand the code is at a lower level than what’s needed to grasp the financial concepts. Of course, I would…
Wen writeup? @Infosec_us_team
+1 more critical this month. The project is offering its maximum reward ($500,000). The attack required no capital, prerequisites, or access to any privileged role; anyone could have exploited it.
Leaking a secret the pros don't want you to know 🫵: If I could give an advice that works for *anyone* in auditing, it would be: adopt a strength-based approach. 🧵👇
It ain't about money. It's about how many hours you can stare at almost bulletproof code and keep moving forward. How many LOC you can analyze and keep moving forward. That's how winning is done!
First time competing on @immunefi — feels great to see my name on the leaderboard. I also realized I really enjoy auditing infrastructure and connecting the pieces together. Thanks for the opportunity! On to the next one.
Nice to see a happy ending for a change, along with a strong collaboration among multiple actors in the Web3 community. Well done! Kudos to you all!
100 ETH were assumed lost but could eventually be recovered. Here's what happened, how it became a happy ending and what's needed to prevent this from happening again. Context A user of Safe{Wallet} wanted to bridge 100 ETH from Mainnet to Base. But then they realized that they…
Selling CAT2 UECL Final ticket. Anyone interested, DM me or comment. #ChelseaFC #Betis @ChelsFaceValue @Chelsea_spares @CFCPys
To the anon SR out there: do not give up. Go back to that tricky codebase one more time, dissect that 200-line function once again, rewrite that PoC until your mom gets it, and refine that submission until it’s flawless. Obsess about your craft—because nothing tastes better than…
Quite simplified, but still good for psychology
Think like that: the code had 1,000 bugs. The devs got most, then the auditors got almost all of the remaining. But missing 1 out of 1,000 isn't that hard. Or finding 99.9% of bugs is hard even when multiple people are looking for the bugs. All you need is one bug left.