Pinned Tweet
I'm just 43% done with smart contracts security at @CyfrinUpdraft now there an audit @CodeHawks on @battlechain that I tested months ago that is now live. I'm gonna participate regardless i mean what are the odds 😂 . My life revolves around @PatrickAlphaC at this point lol
KorexOnChain retweeted
Reading this could be the closest thing you get to recovering assets if you interacted with the link or you received it you already a victim and will get targeted again. @FRSCNigeria security should have Conducted a cyber retaliation if the consideration of citizens was
The nonchalancy of projects toward security is amusing. Like who the heck you telling sorry 😂
Sorry for your users honestly
I did an independent audit on a platform and discovered a critical that literally puts users account in arms way I tried doing a responsible disclosure but here's the reply I got.
You all founders should honestly do better
KorexOnChain retweeted
The matter of you guys not honoring security disclosures I had all the time in the world, I would have done it. This is a forensic investigation I conducted on a neobank launched on @SuperteamNG. When I reached out, the founder told me he wouldn’t support the work and said he
KorexOnChain retweeted
This is exactly what I mean when I say security research and bug bounties are becoming a desert for retail SRs. This issue was confirmed by triage, then suddenly changed to “out of scope” after escalation and further review. So a drain is now out of scope? Classic lol.
KorexOnChain retweeted
I’ve been careful about moving away from security auditing. Why, you may ask? Everyone is now a pro-level auditor with AI skills. Immunefi has paywalls, and HackenProof accepts criticals only. I see the system as an unfavorable environment for retail security auditors.
When your value is tied to your level of knowledge, there are steps you simply can’t skip. Build real career capital and don’t rely entirely on AI otherwise, you’ll have the tool without the skill, like a farmer carrying a gun onto a battlefield.
POV you decided to bug hunt on @cantinasecurity and so far you've gone from rejected-duplicate I mean if you look at it duplicate meant finding was valid even if not rewarded.
Shii we will actually get this win one day
The goal has always been to be a smart contract auditor and i think web3 really needs that right now . So i completed my first audit, @CyfrinUpdraft smart contract security course @PatrickAlphaC
I'm kinda hyped for this 😎💯
1. just shipped DispatchPay 🚀
dispatch-pay-wt2a.vercel.app…
a decentralized escrow payment app for buyers and sellers
wallet-based auth, OTP-verified delivery, and on-chain fund release
here's how it works 🧵
6. it's live on @base sepolia, it's rough, and there's a lot more to build
if you're a developer, a buyer, or a seller — I'd love your feedback
what would you add? what's broken? drop it below 👇
@CyfrinUpdraft @PatrickAlphaC @solidity_lang @developers