A year ago (August 2023) I made ~$120k pure profit doing Solidity smart contract security audits. Single month, 6 figures. Worked day and night.

Ask me anything✌️

I work at the posts office

terminally.online

Don't use `transfer` from `address payable`. Use `call` with `value` instead.

What is the most common, easily prevented error you see from smart contract developers and how should they avoid it?

Elevating onchain creators 

@nodefoundation @brightmoments 
@ampsfun

Can you expand on this? Is this Solidity specific?

Is there a future where LLMs can help us write truly bug free contracts? What role, if any, do GPTs play in your audit process?

I run a security company now and hire people smarter than me to do audits! :) Only publicly-proven, elite talent.

Very high level of certainity, but no guarantee (it's impossible). I paid no tools or services, it's pure profit. I did coding

Did you keep going? If not, why stop?

How much certainty could you provide clients on your audits?

Noting "pure profit," does that imply you paid for tools/services for help?

What did you do before audits?

Haha I had 0 engagement. Then it blew up. Just answered all!

Guy posts AMA and then ignores all the questions..

Stay Curious // iixii // Head of Crypto at https://www.lazertechnologies.com/  // Prev: CoinDesk, Roc Nation // based @basedevo

Would love to connect and hear more. We have a good amount of crypto clients that usually need audits.

Saved them 100x times this, I'm sure. I think there are good firms! I run one myself now

Did you save the protocols at least that much money through the audits? 

What do you think of smart contract security firms?

𝖒𝖆𝖓𝖉𝖆𝖙𝖚𝖒 𝖆𝖉 𝖆𝖘𝖙𝖗𝖆

Both are GREAT. There are many other options that are also great right now.

FOrmal verification definitely isn't critically necessary.

is C4 the best approach so far?

how about yAudit?

is formal verification critically necessary?

based as hell

are you freelance or looking for a team?

building /propertyforecast | data stuff, robotics, sometimes defi

favorite tools for automated detection of issues?

or that devs should include in CI?

I have commitment issues || I only commit to good vibes

First depositor inflation attack with ERC4626 vaults

the most recurring issue you've encountered

I am a consultant and software engineer, specializing in information technology and business development.

Start with Cyfrin Updraft. Then try code4rena

How does one get into security audits? I work day and night and would like to maximize my time. Thank you.

I post Memes, I'm 96 year old child: /chatfcp
Whatever I post is not financial advice always do your own research

after learning solidity lang what should I learn to achieve this level?

What’s the best learning resource for becoming the best smart contract developer today? Would you recommend Solidity still ?

Creative Director, WEB3 enthusiast, web developer and ...
OG graffiti artist

What led you to to doing the audits? sounds interestingly profitable fren!

Economic experimentalist

https://github.com/csmit863/crypto_craft

Oooh, in that case, what was your first audit/contest like? Was it successful?

Not late at all, there are enough. I have turned down many

do you think it’s late to get in the field? Are there enough opportunities left?  Can you answer this question with some numbers (ex. number of clients you had to turn down due to capacity constraints) Thank you.

Controls engineer trying to level up in crypto

How do I get started ? Should I get started ? I want to be more than an investor in crypto but there isn’t a roadmap setup for people yet like most careers. This career would be like learning how to drill for oil 100 years ago

Do you still audit smart contracts for a living ?