misbahu @Designer_Misbah

smart contract hacker | ex @KannAudits | founder @Nominal_ID nominalid.com Onchain Joined January 2022

Tweets

2K
Followers

2K
Following

8K
Likes

4K

misbahu @Designer_Misbah

28 minutes ago

Stack too deep is still half-solved I think. Some projects are so complex that adjusting your local variables is not enough due to dependencies. solx compiler does compile that kind of code. which is great. But how do you get the code verified on Etherscan since they don't…

0 0 0 29 0

misbahu @Designer_Misbah

57 minutes ago

How to Launch Without Holding Anyone’s Money: The Refund-First Blueprint ZKasino Didn’t Use On April 20–21, 2024, users bridged roughly 10,515 ETHabout $33 million at the time (the video says $31M), to ZKasino. Instead of holding deposits in an escrow with a programmatic return…

0 0 2 57 0

Download Video

Base Builders Kano @BaseKano

20 hours ago

1/ What’s a smart contract? Forget the jargon. Think of it like a digital vending machine sitting on a blockchain. You put in input (like coins), and it executes exactly what it’s programmed to do automatically. No middleman. No excuses.

1 6 6 143 0

Download Image

misbahu @Designer_Misbah

a day ago

This is an interesting community to be in

0xGondar @0xGondarxyz

a day ago

This is an interesting community to be in

2 6 37 2K 3

1 0 10 863 0

misbahu @Designer_Misbah

3 days ago

Let me tell you why that codebase you are afraid of, has a bug. They paid thousands of dollar for audits. 5 audits firms worked on the codebase. They added new features. They fixed some discovered bugs. They could not afford a fresh audit for every single feature addition.…

2 2 46 2K 16

misbahu @Designer_Misbah

3 days ago

Today marks my last day at @KannAudits. I got a ton of growth and progress while there. Thanks to everyone at Kann. Now I am open to any of these: 1. BD at an audit firm, to create partnerships and connect with clients. 2. Writing Post mortems 3. Writing clear documentation 4.…

3 4 52 2K 2

joshade @josh_my_man

3 days ago

Speaker Alert @PatrickAlphaC Limited tickets available Register Now - web3securitysummitafrica.com

32 30 194 7K 29

Download Image

misbahu @Designer_Misbah

4 days ago

Cooking spicy stuff from the Valkyries lab.

0 0 1 196 0

Download Image

misbahu @Designer_Misbah

4 days ago

I think the best application of AI security tools is in live code (e.g for bb hunters or opsec to detect anomalous transactions). Before going to mainnet, you need a human that will keep the context of the program in their head, for some time, and test assumed attack paths.…

0 2 14 958 0

misbahu @Designer_Misbah

5 days ago

Last month, I had 14 invalid Bug bounty reports. Oh no, two were valid but out of scope, 3 were informational.

3 0 7 481 0

Martin Marchev @MartinMarchev

6 days ago

Some recent hacks got me thinking. For a long time, contests have marked centralization risks "out of scope". And I believe this is fair. The logic is that project owners are assumed to be trusted actors. But in a way, this has done the industry a disservice. Because the real…

11 11 97 6K 19

Guardian @GuardianAudits

a week ago

Whitelists are a cornerstone of DeFi security and compliance. They enable protocols to meet regulatory requirements, control access to high-value functions, and more. Here's how attackers can use EIP 7702 to bypass whitelists and turn access control into an exploit 👇