Dacian (@DevDacian) / X

Dacian

3,419 posts

Dacian

@DevDacian

Audit Team Leader @Cyfrin Protected $50,000,000,000+ on-chain TVL!

in your storage | 🇰🇷

Joined April 2021

Pinned
Dacian
@DevDacian
Mar 25, 2024
1 Hour with @PatrickAlphaC where I cover: 1⃣ how I break down stateful fuzz testing by invariant types and contract lifecycle 2⃣ my favorite general heuristics which I use to find all sorts of bugs in many different codebases 3⃣ mindset and ultimate recipe for success Link👇
56K
Dacian
@DevDacian
Jan 31, 2025
Q) How to start making money through auditing? Assuming you have built up a decent skillset, the following strategies may work: 1⃣ Pick a protocol niche (DAO, Perps, Dex/AMM, Lending/Borrowing, Bridges/Cross-Chain etc) then study all the past contest & private reports for
23K
Dacian
@DevDacian
Oct 9, 2023
October 2022 - started learning solidity as a hobby March 2023 - focusing on security & began writing my "Deep Dive" series October 2023 - blessed to join @cyfrin as a full-time smart contract security researcher! 🚀A lot can change in a year if you put your mind to it🚀
37K
Dacian
@DevDacian
Jan 15, 2025
Q) Fastest way to become pro auditor from 0 knowledge? * Free @CyfrinUpdraft courses on Solidity, Foundry & Security * Do 2 First Flights @CodeHawks * Shadow audits of Beedle (codehawks.cyfrin.io/c/2023-07-beed…) & USSD (audits.sherlock.xyz/contests/82?fi…) * Start competing in real contests
15K
Dacian
@DevDacian
Jun 27, 2025
More niche Solidity knowledge which occasionally gets great findings: 1) storage is copied to memory, then memory copy is reset instead of storage💥 2) storage is copied to memory then correctly reset, but then storage is read instead of memory💥
15K
Dacian
@DevDacian
Oct 10, 2025
3 yrs ago - started learning Solidity as a hobby 2 yrs ago - joined Cyfrin, consistently produced great private audit output 10 months ago - started managing audit team, produced great business results turned audit team into efficient 💰 printer Now - living the dream 💪
Dacian
@DevDacian
Oct 9, 2023
October 2022 - started learning solidity as a hobby March 2023 - focusing on security & began writing my "Deep Dive" series October 2023 - blessed to join @cyfrin as a full-time smart contract security researcher! 🚀A lot can change in a year if you put your mind to it🚀
33K
Dacian
@DevDacian
Jan 3, 2025
Happy to announce I'll be leading @cyfrin Private Audit Team in 2025! 2024 was a huge year for Cyfrin private audits, we completed many successful private audits for huge native web3 protocols and increasingly also for major #TradFi institutions. 2025 is shaping up to be
14K
Dacian
@DevDacian
Jan 21, 2025
I've become convinced that #DeFi Liquidation code is the trickiest to safely implement with highest "bug density". New Epic Liquidation Deep Dive coming soon with 37 vuln types - but first check these 10 niche findings that could be your next unique contest winner! 👇
10K
Dacian
@DevDacian
Feb 27, 2025
Sad to see such rage against @pashov for giving interns real-world private audit work experience & mentoring. Many newbie auditors offer to work with me for free just to learn but I'm way too busy to mentor anyone individually. The interns should really be paying Pashov!
15K
Dacian
@DevDacian
Jun 23, 2025
In private audits sometimes I comment out a few important lines like token transfers, then re-run the test suite. If all test still pass, this indicates the test suite doesn't validate important state changes & there are likely many bugs to be found.
16K
Dacian
@DevDacian
Apr 25, 2023
Just published this EPIC Borrowing, Lending & Liquidation Deep Dive! I read through every public c4 & sherlock contest, categorized & systematized the major vulnerability classes found in these #defi systems, and made it all freely available to help YOU!
Lending/Borrowing DeFi Attacks
From dacian.me
18K
Dacian
@DevDacian
Jan 21, 2025
Replying to @0xT1MOH
You are one of the younger people building wealth. Congrats! But the sad truth is that many young people who acquire large amounts of wealth end up blowing it and have nothing to show for it later on. To avoid being one of them: 1) Travel - before marriage & kids is the best
14K
Dacian
@DevDacian
Apr 19, 2023
Received my first bug bounty: $28,000 admin brick & forced revert in a live smart contract. Combines two vulnerabilities: missing access control & unchecked state transfer, leverages them into perm forced revert & admin brick. Successfully mitigated.
dacian.me
$28K Bounty - Admin Brick & Forced Revert
Alchemist is a web3 community who developed the notable Fjord Foundry platform and a DeFi ecosystem composed of at least: Alchemist ERC20 - token $MIST Aludel - staking/rewards program Crucible - a...
32K
Dacian
@DevDacian
Oct 13, 2025
Cyfrin jobs launched with a 🔥 list of job openings: @Uniswap @monad @vyperlang @EtherFi @heliuslabs @solana @redstone_defi Almost all Mid->Senior level roles 🚀
13K