If you think like a hacker, you can hunt in any stack. Going from EVM to Solana to Move used to take months each, web2 even longer. With AI It's much faster

Happy birthday to this security researcher. Another year of growth, learning, breaking things, and understanding how to build them better. Every vulnerability discovered, every lesson learned, and every challenge faced is shaping a better researcher. https://t.co/9Xn44C14wH

This week’s big reminder in DeFi security Most losses don’t come from magic. They come from ➣ Trust assumptions ➣ Bad privilege design ➣ Fragile pricing logic ➣ Unsafe call flow ➣ Logic that was never tested adversarially I’m going deeper into each of these

As a security researcher You don’t just learn how to find bugs. You learn how to look at code differently.

Security is often about understanding relationships between different contracts linked together, not just lines of code.

who ignore signs go see wonders

You don’t need permission to become a smart contract security researcher. Just start breaking things.

Flash loans didn’t create DeFi hacks. They exposed how fragile most protocols are.

Let the hunting get started 💻

Before trusting a DeFi protocol, I want answers to 5 questions 1. Who can change critical parameters? 2. What assumptions does pricing depend on? 3. Where are external calls made? 4. What invariants are supposed to hold? 5. What failsafes exist if assumptions break? Most users never ask. Attackers do.