$20M stolen by an exploit that had already been reported a year ago

SQLite is cracked

2 lessons from recent Immunefi experiences: 1. Before writing a POC, submit a basic transaction using the protocols web interface (not a hack or test related transaction). Then check on etherscan which contract you just interacted with. Sometimes the contracts in the scope page

How often do audits make an entire dev team get replaced? 😮

Which audit firms are "tier 1"?

Great article by bogo He picks 4 instructive findings and reverse engineers the auditor's thought process. When reviewing findings, you should ask yourself about the thought process that lead to the bug 🧐, not just the technical details

A funding rate is typically used in perpetual futures contracts to keep the futures price in line with the asset price. Some DeFi protocols use funding rates for different purposes, so it's helpful to know the underlying logic behind some funding formulas. This article is

Obsidian (markdown text editor) is really useful for auditing.

Best posts/learning resources for Uniswap V4?

New Episode Alert! We're thrilled to feature deadrosesxyz on this episode! Being in his 19 he is on track to hit $1 million in 2024, this man is redefining success in the bug bounty world! Tune in to hear his incredible journey: bit.ly/3X0fVlL

🦄

Honored to be securing Uniswap before the largest blockchain security competition ever 🦄

I applied for the Network School. Sounds cool to live on an island with likeminded people. Anybody else interested?

Negotiating whether you get a million dollars on github

🦄 If you're participating in the Uniswap Labs 🦄 Cantina 🪐 contest, don't miss this Twitter Space between OpenZeppelin and the Uniswap team! 👀 We'll be dropping alpha to help you find a bug in the biggest audit contest in history. 🕵️Auditing Uniswap v4 was a blast and we