alix40
@AliX__40
Followers
1,143
Following
413
Media
31
Statuses
378
SR on a quest to secure all lending protocols! co-founder at @A2Security
Joined May 2022
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
Linkin Park
• 180942 Tweets
Adalet
• 180261 Tweets
Gazze
• 115749 Tweets
Chester
• 94159 Tweets
ベイマックス
• 94026 Tweets
小泉進次郎
• 86384 Tweets
#INZM_HyperBandLive
• 45079 Tweets
#笑うマトリョーシカ
• 41100 Tweets
知的レベル
• 40845 Tweets
雇用統計
• 36293 Tweets
資さんうどん
• 35938 Tweets
大阪府警
• 33800 Tweets
エイリアン
• 33059 Tweets
Game Day
• 22514 Tweets
#ساعه_استجابه
• 22209 Tweets
神ちゃん
• 19289 Tweets
#Aスタプラス
• 15707 Tweets
NANON LETSGO NYFW
• 14035 Tweets
KIDNAP CHAPTER ONE
• 13197 Tweets
ビーズリー
• 11064 Tweets
ロムルス
• 10958 Tweets
シングルス
• 10361 Tweets
Pinned Tweet
Yup, you heard it right! 🚀 Our goal is to secure all lending protocols. If the goal isn’t ambitious/delusional, it’s not worth pursuing! 💪🔒
🎉 Announcing A2 Security: The Future of DeFi Lending Security! 🎉
Hello, Web3 builders and security researchers!
We are thrilled to introduce A2 Security, a firm founded by a group of distinguished white-hat hackers with a verifiable public track record, multiple audit
7
4
43
4
2
42
🎉 Results from My First 6 Months in Web3 Security (Part-Time) 🎉
I've had quite the journey since diving into web3 security in January, balancing it part-time, and I’m excited to share both my wins and fails along the way.
Funny story: back in January, I wrote in my bio that
66
37
567
🧵Results from My First 6 Months in Web3 Security (Part-Time)
Part1: January 24
Before the Start (October - December)
January was the month I decided to take web3 security seriously. But before diving into what happened in January, let me share a bit of background. 📖
Last
7
11
152
The key skill in auditing isn't:
❌ A PhD in math
❌ 3 years as a Solidity dev
✅ It's the ability to force yourself to focus for long periods. 🧠🔍
5
14
133
🎉 Happy to have come in 4th out of 610 in the Euler-v2 competition! 🚀
It was a tough codebase to crack, but a huge milestone in my goal of securing all lending protocols. Honored to have participated and contributed. Learned a lot!
Thanks
@cantinaxyz
for the opportunity! 🙌
28
3
125
🧵Results from My First 6 Months in Web3 Security (Part-Time)
Part2: February 24 Lessons Learned the Hard Way
This is the month where I made the mistakes I regret the most. I made a bunch of beginner errors that definitely slowed my progress a lot. If you’re starting your
5
9
126
🧵Results from My First 6 Months in Web3 Security (Part-Time)
Part4: April 2024 my first peak
The first two weeks of April were spent on the last contest from March. I dedicated 150 hours just to reading the lending protocol. This was the most valuable learning experience since
8
3
104
I got a small win on the
@SizeCredit
contest on
@code4rena
, it was the first matchmaking protocol I audited, and I missed a lot of bugs. I am definitely mad at myself for not finding those. I need to push harder, I need to secure all them Lending Protocols 🫡
7
2
93
🧵Results from My First 6 Months in Web3 Security (Part-Time) Part3: March 24
Turning Point
March was the month when my luck and skills finally compounded enough for me to start competing effectively. 📈 According to my records, March was also the month I spent the most hours on
9
5
91
I have written 3 articles (3 first months) about my journey in web3 security. I am new to writing and content creation. I really want to hear feedback. Is there any thing you guys think I should work on improving?
17
4
90
I came 4th place ! 🏅 Knowing that one of my favorite people in web3sec is
@GalloDaSballo
and
@BadgerDAO
has created really awesome products, I definitely wanted to take part. I had private stuff going on and was busy, so I only spent 8 hours on the audit. Really happy with the
14
5
87
🚨 Big news! 🚨 Starting July, I've teamed up with the incredible auditor
@el_hajin
to create
@A2Security
! 🛡️
Our first collaboration? The
@chainlink
CCIP on
@CodeHawks
. Despite a late start and limited time, we achieved 100% coverage of High/Medium issues! 💪
Working solo
10
0
81
Sometimes, I think the most efficient way to audit a math heavy function, is to first delete the code and try implementing it urself. That way it is a lot easier to spot bugs!
3
0
65
I am always telling my friends, that I am doing web3 sec to the side. Is that still fair to say, knowing I actually spend 40 hours+ on it each week 😂
2
1
58
Just shared some Web3 security tips with frens starting their journey. Thought I'd share them with the community too! 🚀🔒
3
3
59
Just doubled my followers in 24 hours! 🫡 Thanks for all the kind words and DMs. I’ll respond to everyone soon! 🙏
2
0
56
Today, i submitted my first ever report to a bug bounty program. For some reasons, once i found the bug, my heart started racing, and I started typing crazy fast. The Adrenaline spike is unparalleled, I think i might get addicted xD!
(let's hope the bug get's accepted :) )
10
0
50
Second Place🥈 in a contest with 180 + auditors.
Thanks
@code4rena
for the opportunity!
A lot more to come from me soon 🔥
8
1
47
Since I started doing web3 sec seriously this January, I didn't take a rest of more than 4 days in a row (was sick) and sometimes I wonder if rest is actually a good thing to improve or is this just the lazy person in me talking? I saw
@milotruck
interview where he mentioned
7
1
46
Feedback from my last
@code4rena
contest:
1:🐺 During the last contest, I finally tried Docs Wolf. It was impressive, answering all my questions. I only needed to ask sponsors 1 private question while submitting 10+ H/M.
2: 😅 Sponsors often get bombarded with simple questions
7
3
44
My first top 10 finish on
@cantinaxyz
Many more to come 🥂
Glad to have contributed to
@Curvance
8
0
41
I’ve been auditing the
@SizeCredit
codebase as part of the
@coderena
contest and I must say, I've never seen anything like this. The codebase is such a gem! 🌟 Built on
@aave
, everything from the structure, architecture, and modularity feels like an organic extension rather
2
4
34
I have been the underdog my entire life, and there is nothing in life that makes me happier than seeing another underdog fn win!
1
0
28
A lot of people, asked me about a roadmap, to start web3 auditing with no technical background. Want a living proof, that can be done? Check out the roadmap of my beast of a partner at
@A2Security
!
Lately, I’ve been asked a lot about the roadmap to becoming an auditor. After ranking in the top 5 of public contests 10 times. here’s a roadmap inspired by my journey for those who don't know where to start :
1⃣Understand What a Blockchain Is: Start by getting a solid grasp of
4
22
143
1
1
26
Found another crit and medium on the last push! Worth it!
4
0
24
Just realized top auditors use anime profile pics while I’m Googling "free logo maker." 😂 Drop your fave anime characters 👇—I’m joining the cool kids club!
13
0
23
🎟️ Got my tickets for
@summit_defi
! Excited to join all the chads attending. See you there! 🚀💎
1
1
24
Gonna bookmark this and after three months am gonna see if this was the secret to join the 0.1%
3
0
22
🧵 Thread: Understanding Rebasing Tokens in AAVE & the Difference Between scaledBalanceOf() vs balanceOf()
1/ 📘 Rebasing Tokens in AAVE: Rebasing tokens automatically adjust their supply to maintain a target price. In AAVE, aUSDC is an interest-bearing token that accrues
1
1
23
What I Did Right in February:
I focused on the heavy math, fee calculations, liquidation logic, etc., which compounded in later months. 🔢
What I Did Wrong in February:
- I lost focus. 🎯
- I chased contests for money. 💸
- Instead of sticking with one language/ecosystem until
3
0
22
January: Diving In
As part of my New Year’s resolution, I set two goals for myself. One of them was to make $100K from side hustles. 💰 I knew it wouldn’t be easy, but having fun with web3 security and seeing huge payouts, I thought, "Why not?" I decided to dedicate 100 hours to
3
0
23
What I Did Right in January
- I didn’t obsess over learning; I jumped straight into contests and tackled the hard things first. 🏃♂️
- The hardest part is starting, and I’m glad I started directly with contests.
What I Did Wrong in January
- I was too naive and assumed it would
0
0
23
To the ones participating in the
@SizeCredit
comptetion on
@code4rena
, and wonders how rebasing tokens in aave work, please come take a look 🤓
🧵 Thread: Understanding Rebasing Tokens in AAVE & the Difference Between scaledBalanceOf() vs balanceOf()
1/ 📘 Rebasing Tokens in AAVE: Rebasing tokens automatically adjust their supply to maintain a target price. In AAVE, aUSDC is an interest-bearing token that accrues
1
1
23
0
4
19
One of my favorite ways to stay on track during contests is to use an external countdown clock that I carry everywhere. The ticking clock adds a sense of urgency that keeps me focused and engaged in the competition. 🕰️🔥
2
0
18
What I Did Right in April:
- I worked really hard. 💪
- I prioritized learning over earning. 📚
- I took a bigger risk by using a couple of paid vacation days. 🌟
What I Did Wrong in April:
- I started to grow an ego. 🤦♂️
0
0
16
We are creating the illuminati version of web3 security. Stay tuned 😜
3
0
17
There should be a law in public contests, if ur protocol only uses hardhat and Javascript, u shouldn't be able to start one.👼
1
0
15
I dedicated those days to focusing entirely on the contest. I also did something that I think helped me a lot back then.
What I Did Right in March:
- I spent time daily learning and applying new knowledge to the codebase I was auditing. 🧠
- I hustled hard and worked
0
0
13
Amazing journey. That is the story of true champ 🏆
okay let me share my journey :
1/11 My tech journey started in an unexpected way. As a taxi driver and economics university student, my only prior tech experience was tweaking settings in Counter-Strike. 🙂
50
27
269
1
1
13
The first half of 2024 is over! I see fellow auditors setting goals, such as a certain amount of money, a role etc ... My goal for the next 6 months is simple => Do 1000 ( 6*167) hours of web3 sec. Control the controllable!!
0
1
11
🚀 Attention Auditors and Business Professionals! 🚀
We want to know your expert opinion! 🕵️♂️🕵️♀️ What's the ideal size for an auditing team to maximize efficiency and thoroughness? Share your insights! 📊✨
Solo Auditoooor
11
2 SRs
27
3-5 SRs
40
5 SR+
6
3
0
11
What i love about competitive audits, and smart contract auditing, is how hard people try and how hard it is to be the best. This is one of the small number of places in tech where being great is not enough, it humbles u and makes u push ur limit!
0
0
10
I decided to do bug bounties next month, and every platform started publishing those juicy contests xD. At least none of the biggest competitions are lending, so I should feel less FOMO😅
2
0
9
I am probably the only one in the competitive auditing space, that takes all his winnings and short eth with it 😂
3
0
8
1
0
7
A year ago, JavaScript was my favorite language, now if I see hardhat in aproject, I kinda get disgusted 😡
3
0
6
@0x18a6
@CodeHawks
Cherish the start, my first payout was 19 bucks and from all my other payouts, that is the one that made me happy the most !
2
0
5
I think next month i am gonna try out my luck in bug bounties, any one have recommendations where, how to start?
2
0
5
@ancap_gao
@code4rena
First of all thanks so much for answering the questions of all C4 wardens. I definitely agree with u. I think C4 could try to push docs wolf more. I also think by this wardens would also benefit because the LLM have instantaneous and thorough response (for the easy stuff)
2
0
3
@defilearner1
@SizeCredit
@code4rena
Most lending protocols rely on similar concepts to vaults,
@SizeCredit
relies on matchmaking, which is basically someone issues an offer either to lend or borrow (limit order) and an other user matches that offer using a market order to create both a borrow and a lending
0
0
4
@ooxmalone
i have read btc/eth/solana white papers and did some ctfs + unrelated economic and financial study back in november / december, that might have helped
1
0
4
@hackwillaa
I tell my self I am a loser daily. And make sure to call my mom so she would tell me the same thing xD
1
0
4
👩💻🧑💻 Poll Time! Smart contract auditors, what's your go-to VS Code theme? 🎨
Dark+
47
Light+
4
High Contrast (my fav)
2
Other (comment below)
2
5
0
3
@GalloDaSballo
@milotruck
Alex always with the wise words again! Yeah definitely, I see ur point.
0
0
4
@cmichelio
I didn't know I will get so many alphas by just posting a thought🤯, appreciate the response a lot!
0
0
4
@SatoshiPixel
I am not a self-improvement guru. But for me i Just kept at it and with time I became consistent. At first it was hard to work for 1 hour straight than it became easier with time to work for way longer hours
0
0
4
1
0
3
@maakayjunior
Stick to it, and know that it could take up to a year before seeing results. So u need the fortitude to stick with it for a long time.
1
0
4
@bbl4de_xyz
Yeah the right choice is to always stick with a plan for at least a defined period of time. Else I will be just wasting time.
0
0
3
@windhustler
Each time i do late workouts at 10pm, i would be unable to sleep for more than 4 hours (which I use as a life hack to sleep less xD) is it just me or does any one else experience it?
1
0
1
2/ 🔄 How aUSDC Works: When you deposit USDC into AAVE, you receive aUSDC in return. These aTokens grow in value as interest accrues. The rebase mechanism ensures your aUSDC balance increases proportionally to the earned interest.
1
0
0
0
1
2