Mark (@keterka) header
Mark (@keterka) profile picture

Security researcher Top-18 Hacken Proof all time, 100+ (H/M) DM for private audits👇

Joined July 2023
Photo by Mark (@keterka)Photo by Mark (@keterka)Photo by Mark (@keterka)Photo by Mark (@keterka)Photo by Mark (@keterka)Photo by Mark (@keterka)Photo by Mark (@keterka)Photo by Mark (@keterka)
Pashov Audit Group 🤝 @k3_capital Our teams are now busy securing the code of K3 Capital, the Institutional DeFi asset and risk management layer. Looking forward to collaborating with their strong technical team🫡
1
5
36
1,945
We recently did another successful audit for @PerpGame The code has some minor issues, but the team resolved them in no time. Highly professional team and excellent fixes to the issues we've found.
1
2
1
6
864
Mark retweeted
What clients think about us at @PhageSec 🧵
2
3
26
1,917
Top 3 researchers this week: 🥇 Otter11 🥈 @keterka 🥉 xaleraf4ra On a roll! 🔥 Want your handle here? Join active programs: hackenproof.com/programs
1
3
41
2,582
Mark retweeted
Severity distribution across my 100+ audits: 38 Criticals (6.6%) 192 Highs (33.3%) 347 Mediums (60.1%) Mediums are the job. Crits are the bonus.
2
2
66
2,256
Mark retweeted
My Q2 2026 stats: 📈 Audits: 9 (most were long D:) 🐛 Bugs: 8H, 31M 🚨 Bug bounty: 1 CRITICAL (live prediction market) 🔮 PM audits: 4 🟢 Hyperliquid audits: 3 1 quarter, 3 chains: EVM, Solana and HyperEVM + a full Back End review
5
2
99
2,551
Mark retweeted
In cybersecurity it's not about how many bugs you catch, it's about how many are left
3
3
1
62
4,383
Mark retweeted
How to be a good auditor: 1. Stare at boring code for 8 hours and not find anything (because there are no bugs) 2. Do it tomorrow too (because there might be 1)
1
13
1
111
3,871
Mark retweeted
If you are in your 20s now is the time to take risk. No kids, no obligations, nothing to loose
9
4
80
2,627
Mark retweeted
Another audit done for @robinmarketsxyz! Sharp team, fast to ship fixes, and they take security seriously.
5
3
51
2,211
I built an extension for smart contract audits to visualize function call flows. open-vsx.org/extension/ancha… I encourage you to check it out because I believe this extension can significantly help with smart contract auditing and save a huge amount of time. If you have any comments, find any errors, or have ideas for improvements, feel free to reach out to me. Check the video below to understand what this extension does. I hope it helps you find vulnerabilities in smart contracts and makes DeFi and Web3 more secure. I’d really appreciate your feedback and a retweet!
8
11
3
72
9,424
Mark retweeted
If you can stare at boring code for 8 hours and not find anything (because there are no bugs), and you do it tomorrow too (because there might be 1), then you are just for this role.
2
6
1
82
2,548
Valves 🤝 EZManager (@EZManagerCL ) EZManager tracks every position lifecycle. From opening and rebalancing to capital changes, compounding, and collections. We are going to ensure their contracts meet the highest security standards 🫡
4
2
18
1,857
Very sad news. The closure of @code4rena reflects the current state of the Web3 security industry: almost no public contests, an ongoing crisis, a bear market, widespread use of LLMs by blackhats and daily hacks. Any industry needs new talent in order to grow and expand. Without public contests, it will become nearly impossible for newcomers to grow professionally and participate in protecting DeFi. This would lead to the degradation of the entire Web3 security industry - and DeFi as a whole - ultimately affecting the speed of adoption and trust in blockchain technology. Everyone knows how much C4 meant to Web3 security and how many professional auditors grew through public contests. It’s hard to overestimate C4’s contribution to Web3 security. Thank you for everything, @code4rena
1
34
976
The Valves Security Training Hub is now listed on @Giveth A free pattern recognition platform for smart contract auditors. 380+ challenges. 19 bug categories. 50K+ real audit findings. Train pattern recognition on real exploits, not textbook examples. Free forever. 100% goes to the project. giveth.io/project/valves-sec…
1
13
57
2,031
Mark retweeted
Another 🏆 - Top 10 out of 1009 auditors. There were days I didn’t feel like doing this at all. Still showed up. That’s the difference. Go get your W. Thanks @sherlockdefi 🫡
15
1
118
2,007
🚨Free for anyone who wants to get better at Web3 security!!! Most researchers struggle with: • Too much passive reading • Not enough real-world attacker pattern recognition That’s exactly what we’re fixing with the Valves Security Training Hub. 📚 Instead of just theory, you will train on how attackers actually think, so you can spot vulnerabilities faster and with confidence. If you’re serious about improving, this is for you. Start training 👇 training.valvessecurity.com
13
25
1
146
5,568
Mark retweeted
What a week of private audit actually looks like: Day 1: read every line, understand nothing Day 2: re-read docs, draw the architecture on paper Day 3: find the first H, feel like a genius Day 4: realize it's a dupe of a known issue, feel stupid Day 5-7: find the real ones Day 8: write the reports Worth it.
1
21
736
Mark retweeted
"100% test coverage" means nothing in security. I have been audited protocols with perfect coverage and 4 criticals. I've seen protocols with 50% coverage and zero issues. Coverage tells you the tests ran. It doesn't tell you the tests thought. Stop flexing coverage. Start flexing invariants.
2
2
1
14
592