As an auditor, you'll be left out if you're not good at communication
Basic mistakes:
- Not engaging in the chat
- Not pinging when you submit issues
Advanced mistakes:
- Making decisions without consulting the team
- Withholding issues that need more refactoring until the end of the audit
Finding bugs isn't enough anymore.
1
1
22
839
The Only Skill You Need to Be a Top Security Researcher 👇
Master the art of searching without getting tired.
Tips to improve your searching skills:
1. When looking up information, open and read through 5-10 articles, audit reports, or videos. Train your attention span the old way.
2. Get different explanations from AI. Not using it means you're missing out on easy help.
3. If something isn't clear or you still have questions, repeat steps 1 and 2 until you feel sure about what you've learned.
4. Go and practice. If you don't use it, you'll forget it.
Trust me, if you follow these steps, you will retain what you've learned for a long time. 🧠
5
307
You suck at auditing 🫵
That's what I used to tell myself when the first day of an audit didn't end with 10+ crits.
Now I know better: my best bugs almost always come in the final days.
The early days build the mental model that finds them.
Trust the process.
1
1
19
718
That's the driver we need.
We should all be happy for them.
If it weren't for OZ laying out the baseline most of onchain finance is built on, we'd never be here in the first place.
Huuge 🔥
Today we are announcing that S&P Global has entered an agreement to acquire OpenZeppelin.
Onchain finance is growing from an emerging market into core financial infrastructure, and the standards and rails our team and community built are becoming the rails of global finance. OpenZeppelin smart contracts facilitated over $37 trillion in value transferred, with the vast majority of the largest DeFi protocols, blockchain networks, stablecoins and tokenized funds relying on them.
With S&P Global, we expect to accelerate the impact of onchain finance, backed by more than a century of trust in global markets, benchmarks, and risk frameworks.
To our clients and to all the users of OpenZeppelin open source tools:
• OpenZeppelin Contracts and all our open source applications and tools remain open source, free, and publicly maintained on GitHub. Building open source standards stays a core priority.
• Audits, engineering work, and ecosystem programs continue with the same team, brand, quality, and customer experience, with what will be the added benefit of S&P Global's research capacity, market data, and institutional reach.
For the last decade, OpenZeppelin has set the security standard for onchain finance. Today begins a new chapter for that mission, together with one of the most trusted names in global markets.
Read the full announcement: openzeppelin.com/news/spglob…
1
19
712
Blckhv retweeted
The fixed rate layer for DeFi is live on mainnet for early access!
Lock in a fixed rate loan, earn yield as an LP, or trade rate swings with leverage.
A year of work on the missing rate-risk layer, built to grow onchain credit and long-term fixed income.
Try it: kairosswap.com
Comment “Kairos” for an early access code 🧵
25
20
118
7,160
4 years ago, I had 0 Web3 Security experience and gave it everything, every single day.
Life got better.
Every time since then I thought "I've made it" and eased off, life got tougher within months.
Life cycles are real. You control them more than you think.
3
2
44
1,299
Belgrade is the place to be this week.
I'll be at Solana Summit hosted by @SuperteamBLKN and at @EthBelgrade.
If you're building onchain and care about shipping secure contracts, come say hi.
Always happy to talk smart contract security. 🫡
17
460