Smart Contract Developer/Security Researcher | Crypto Advocate | Senior Software Engineer | C++ / Rust | 🇧🇬

Bulgaria
Joined April 2023
If Bitcoin breaks $67,000 within 24 hours of this tweet, I will give 1 random follower who like and retweet this ONE whole #Bitcoin.
3,940
13,775
507
25,506
1,930,189
If Bitcoin breaks $50k by end of 2023 I will give $5,000 BTC to 50 people. Just like, retweet and make sure you are following me. Pls send it
1,005
2,950
42
3,825
184,206
To become an effective Smart Contract Security researcher you should try to acquire these 5 habits: - Continuous Learning: Stay updated with the latest developments in blockchain technology and smart contract languages. Never stop learning. - Maintain a Security-Oriented Mindset: Always think from the perspective of a potential attacker to anticipate vulnerabilities. - Collaborative Mindset: Engage with the community and collaborate with other researchers. - Problem Solving: Cultivate the ability to solve complex problems - Critical Thinking: Cultivate the ability to think critically
1
2
21
2,091
This tweet serves as a complete Web3 Security Mini-course Here's everything you need to know.👇 External Call Attacks (Reentrancy, DoS, Gas Griefing, Return Values) youtube.com/watch?v=VF1HYD50… Advanced Reentrancy Guide youtube.com/watch?v=3T1t2gin… Frontrunning youtube.com/watch?v=dlEIfGT2… Sandwich Attacks youtube.com/watch?v=6y3nwJS4… Intro to AMMs youtube.com/watch?v=QvyMkRtj… Uniswap V3 Deep Dive youtube.com/watch?v=Ltph_X60… Oracle Manipulation youtube.com/watch?v=tbGqaDHZ… ERC20 Edge Cases youtube.com/watch?v=Tx0f8A2Y… DAO & Governance Attacks youtube.com/watch?v=O4fLWPKQ… 21 Critical Bugs & Vulnerabilities youtube.com/watch?v=8fNNVQv4… 3 Important Findings youtube.com/watch?v=ekFN7GtG… Rounding Errors youtube.com/watch?v=6rmLP-ri… Understand Ethereum Cryptography youtube.com/watch?v=9ZKY8DoV… Signature Manipulation Attacks youtube.com/watch?v=V3TJLDHZ… Master Upgradeability Patterns youtube.com/watch?v=e5lWvt1r… Learn The EVM youtube.com/watch?v=Ru3inmu1… Master Calldata youtube.com/watch?v=WkyyT0pm…
4
50
3
237
26,515
.@KyberSwap was exploited due to tick manipulation and double liquidity counting. In summary, the attackers borrowed a flash loan and drained the pools with low liquidity. By executing swaps and altering positions, they manipulated the current prices and ticks of the victimized pools. Ultimately, the attacker triggered multiple swap steps and cross tick operations, resulting in double liquidity counting and consequently draining the pools.
Kyber being exploited on all chains rn. here's an example tx on base. 20m+ lost already
12
99
22
409
216,268
Got another lil one from @code4rena Venus contest. Pumped for the upcoming ones 🫡
2
12
797
Got a reward from the Dopex competition on @code4rena. The reward may be small, but it is a huge motivation boost to go on✌️
12
708
dethera retweeted
This might be the most underrated content in all of Web3 💎 @tinchoabbate, one of the very top researchers out there breaks down step by step from a technical perspective one of the most brilliant hacks we've ever seen: @TornadoCash 🌪️ And it's only got 52 views 😲 youtube.com/watch?v=UFDoDELW…
6
25
146
17,385
If you could ever only watch one video for Security Research, this is probably it
4
36
297
24,609
Nice
🪐 Introducing Cantina Competitions 🪐 With @MorphoLabs! 🦋 • $200,000 • 2500 SLOC • Cantina Code assisted (much bigger than you think) • Invite Code ONLY A new era for web3 security begins today. 👇No invite code? Huge opportunity below👇
168
Game changer. Would recommend anyone to try it out.
Do you want to see the test covered and uncovered lines highlighted directly inside of your smart contract files ? Follow along. 🧵
164
Nice resource for all beginner gas golfers✌️
Gas optimization is the key to saving money on blockchain transactions! 💰 In our new video, @haruxeETH goes over the most important gas optimization techniques and security holes, so you can start saving blockspace and staying safe today! 🏃🏃🏃 youtube.com/watch?v=C--z0GbC…
2
119
The Web3 security community is truly awesome. Kudos @CodeHawks
Want to kickstart your career as a Smart Contract Security Auditor? Security researchers can make $100k+ year But how do you get started? Announcing: CodeHawks First Flights, competitions to kickstart your smart contract security career Here's everything you need to know 👇
1
2
9
664
This is a must watch for anyone who wants to get deeper understanding of the EVM
This quoted post is unavailable.
3
352
It's easy to work hard when everything goes your way. But what about when things start to get tough and you feel like you aren't going anywhere? - Well, those are the times when you have to show what you are truly made out of. Remember this, no matter where you are right now.
5
5
38
3,421
That's the truth - deep understanding of the codebase is the difference between exceptional auditors and mediocre ones.
Junior Auditor: (Discovers 4 active @code4rena Contests with different Pool Prizes: A- $30K, B- $80k, C-$100k, D- $55K) Junior Auditor: wow, there is so much money to be made right now (quicky opens Twitter and post "Guys if you're not on C4 right now you're wasting your time, there is so much money to be made). Junior Auditor: ain't gonna touch A, I better do B and C, so i can challenge myself with this Huge Codebase and make more money. Poor dude opens up the docs of the two projects, reads all in less than 5 mins, opens up the codebases reads 5000 lines of code in 30 mins. DM'ing the sponsors and starts asking the difference between an external function and a view function. He continues grinding so hard back and forth with both contests. Unlucky for him, he couldn't find any bug. Instead of giving up, he switches to @SoloditOfficial doing pattern matching for each lines of the codes to dig bugs. ......finally ends up submitting 20 H 15 M, rejoicing and dancing. Final result comes out, poor dude got $1.5 in contest B, $40 in contest C Junior Auditor: Is this a joke? no way.. ------------------------------ Junior Auditor failed to realize that: - Making most out of contests can only be achieved submitting unique bugs. - Participating in multiple contests at the same time divides attention and often leads to poor understanding of the codebases. - Doing Pattern matching on @SoloditOfficial to find bugs in most cases is a a waste of time. - Focusing attention on one contest at a time is the surest way to understands any codebases deeply and uncover bugs.
185
Little knowledge and high effort can land you in the top 10% of any contest. Low effort and some more knowledge will land you in the top 50% (if you're lucky). In the short term, effort is the best leverage you have.
1
7
50
4,820
When reviewing DeFi protocols claiming to support all ERC20 tokens, it's important to dig deeper. Using SafeERC20 simply does not cut it! Here's a non-exhaustive list of questions that you, as a security researcher should be asking, when reviewing such protocols 👇
1
8
27
2,544
I had a wake-up call to start learning about ZK. Having a strong math background and a solid understanding of Merkle trees, polynomial interpolation, etc., the next step for me is to see how all of that works in practice - Tornado Cash is the best example to start with imo.
1
115