Senior Security Researcher @Certora | Co-founded @EgisSec - LSW, Top 8 in Sherlock

EVM, SVM
Proud to win this one! We haven't previous stableswap math experience, but we always want to challenge us, so we can improve.
🏆 The results of the Basin competitive audit are in! Congrats to everyone who submitted valid findings, especially to @EgisSec (@nmirchev8 and @dethSCA) for a landslide win in their second team showing! Respect to @basinexchange for their solid commitment to the highest security outcomes. Full list of winners in thread 👇
11
1
104
10,264
nmirchev8 retweeted
Seeing a lot of folks leave web3 security as the game changes The fun of “read code and try to break it” is giving way to orchestrating agents and triaging their findings Still security, but a different kind of work. What gives you an edge is (as always) still being figured out
1
2
55
1,647
The man is a maniac!
Still better than sex
4
370
Said the cross chian master!
Best solana auditors @nmirchev8 @J4X_Security @0xcastle_chain That's it
6
429
IMPORTANT INFO for all solana projects SIMD-0525's rollout starts this month—it'll gradually halve slot times (400ms → 200ms) in phased 50ms steps 🚨 ACTION needed if your code derives time from slot counts assuming 400ms/slot, it'll break. Use Clock::unix_timestamp instead.
1
2
18
1,092
nmirchev8 retweeted
Looking at your friend's LLM prompts tells you more about how they think than their social media feed ever will
1
1
275
nmirchev8 retweeted
In life, there's time to make money, time to study, and time to spend with family—but never time to waste
1
17
349
A gold mine
Just published 778 findings in my website 0xsimao.com/findings from contests and private audits 🎉 There are links to the codebase at the right commit, so you can understand the bug yourself instead of just reading about it. Might be the best way to study, enjoy 🫡
15
1,174
nmirchev8 retweeted
Web3 is teaching you finance in a cool way. From understanding the financial primitives while researching DeFi projects to learning how fundraising and VCs function, and how many of the world's biggest companies got started - and how they keep dictating the next big thing
1
25
804
nmirchev8 retweeted
Story Time 📖 I was a humble kid at school. I wasn't the good student, nor the bully, nor the funniest (well, I believed I was, but when you're quiet, no one can know it). I didn't like the system because, even back then, I felt you had to prove yourself to the ones above you and be awarded for it. And imo, people were awarded for the wrong qualities and skills. Everything felt artificial. I still believe that's true for most modern systems, but now I understand why it's needed. When I first found out about blockchain and web3, it instantly caught my interest. I didn't think about the reason behind it, but it has a lot to do with the freedom and possibility. You see decentralization — protocols earning millions in fees where no one even knows who founded them, thriving just because the product is good and no one can stop it with regulations, laws, etc. It's like the jungle, but on the internet. Smart contract contests are the only thing I know of where you provide value without any friction and get paid better than most highly paid jobs in the US. I really hope to see the greatest crypto comeback soon. 🚀
3
2
39
1,289
nmirchev8 retweeted
How to make $11,000 by skipping a `try/catch` Sablier streams ERC-20 tokens for vesting, payroll and airdrops In V2.2, withdrawing, canceling or renouncing a stream called a hook on the recipient or sender contract, so an integrator could update his internal accounting The hook sat in a `try/catch`, so a missing or reverting hook could not block the stream. This looks well defended. It wasn't The caller picks the gas. Under EIP-150 a call gets at most 63/64 of the gas left, the rest stays behind so the parent can finish So send just enough for the hook to run out of gas, `catch` eats the revert, and have just enough for the rest of the call to succeed One transaction, two truths. Sablier says the withdrawal happened. The integrator never hears about it The fix? Sablier dropped the sender and renounce hooks, allowlisted recipient contracts and deleted the empty catches. Failure in the hook, fails the transaction Remember > `try/catch` does not make a callback optional, the gas does
7
67
3,127
Revolut Premium now gives you Chat GPT Pro, nicee Strong orgs partnering up is a strong industry boost
1
10
806
Models becoming so good that vanilla prompting actually builds your harness on the flight and executes with impressive results. You just need to have a clearly defined result.
8
409
nmirchev8 retweeted
Daily reminder for Solana builders: Instruction stack depth caps at 5 — your top-level ix + 4 nested CPIs. Reentrancy only exists via self-CPI; A→B→A throws ReentrancyNotAllowed If your flow already sits near that ceiling, ask whether multisigs will touch it. A Squads execution burns one level of depth before your program even starts running
2
20
721