bogo (@xb0g0) / X

bogo

1,422 posts

bogo

@xb0g0

Lead Security Researcher @CertoraInc | @ArtOfAuditing | Prev - #14 @cantinaxyz All-time Leaderboard & Multiple TOP1/TOP5/TOP10 finishes

Everywhere

github.com/BogoCvetkov/po…

Joined July 2022

Pinned
bogo
@xb0g0
Jul 16, 2024
This is what I've achieved in my first 6 months of auditing smart contracts: 🏇Competitions: 🏆 WIN 2 competitions 🏅 Rank 8th on BLAST (history biggest competition) 🏅 Climb 14th on @cantinaxyz all-time leaderboard 🏅 Climb 55th on @code4rena 90-day leaderboard 💥 Found a
24K
bogo
@xb0g0
Dec 18, 2024
💣 The MOTHER of ALL ALPHA is here. I officially present to you: THE ART OF AUDITING web3-sec.gitbook.io/art-of-auditing The first community-driven resource that consolidates thousands of hours of expertise from the sharpest minds in the industry. I have spent the past 3 months scraping
Preface | Art Of Auditing
From web3-sec.gitbook.io
72K
bogo
@xb0g0
Apr 11, 2024
Last night, I didn't sleep. Actually, I haven't slept enough for many weeks. This time, however, it was out of excitement. I finally 🏆WON🏆 my first competition. Some stats: 🏇6th competition ⌛️ 3rd month of contesting 🏅59th on the 90 day leaderboard 🏅377th on the all-time
27K
bogo
@xb0g0
Nov 28, 2023
If you write smart contracts (like me) or try to break them as an auditor(like me), you probably heard about fuzz/invariant testing After 3 full days of research I finally managed to grasp the practical implications and benefits of it I've created a map so you can do it in 1🧵
30K
bogo
@xb0g0
May 18, 2024
☝️If you're just getting into auditing or having a hard time with contests, I suggest you bookmark this thread and consume it. I've become a bit annoying writing about shadow audits for the thousandth time. 💪But there is a reason for it - it works! I see many aspiring
22K
bogo
@xb0g0
May 28, 2024
First time on @immunefi and results don't lie It was a 5 day struggle and inner battles! Will see how it unfolds🧐 Had a great experience! Credits to @0xMackenzieM and the whole team!
16K
bogo
@xb0g0
Sep 3, 2024
I finally decided to make that step🤯 Since Monday of last week I started grinding on my first bounty on @immunefi 💪3 days later I got my first confirmed Medium and another one in-review This was the signal to convince me I should dive deeper. It's a different experience
9.9K
bogo
@xb0g0
Jun 5, 2024
I ranked 8th in HISTORY'S BIGGEST COMPETITION - BLAST I'm a bit overwhelmed, so I'll start with some stats until proper words line up in my head Stats: 💥1 HIGH 💥1 MEDIUM - a deliberate solo 💥Climbed to 14th🏅at Cantina All Time Leaderboard 💥 My 6th competition 💥 My 2nd
12K
bogo
@xb0g0
Jan 4, 2024
I analyzed the report of a contest I participated in on @code4rena. One specific finding by @milotruck taught me a LOT. It was so simple, yet only 3 out of 125 auditors found it. WHY ? - They asked the right questions!! I'm doing a breakdown of the mental model that empowered
22K
bogo
@xb0g0
Jun 26, 2024
Analyzing the reports from past contests is probably the most important skill that will turn you into a GREAT auditor IF you do it PROPERLY hatsfinance.medium.com/guest-spotligh… I have invested a week and ALL of my experience to create the ultimate deep dive on the subject. I break down
Guest Spotlight Article: How to analyze reports and become a great auditor
From hatsfinance.medium.com
13K
bogo
@xb0g0
May 9, 2024
2nd 🏆WIN🏆 in a ROW If an oracle (a real one 😅) has shown me this in his 🔮, it's up to debate if I would have believed it. But then, there's facts👀 Stats: 🧨solo and the only HIGH 🧨4 Mediums - 2 selected for report 🧨Found 4 of the 5 newly introduced vulnerabilities
15K
bogo
@xb0g0
Feb 12, 2024
I just finished watching @milotruck video, where he talks about auditing 😱It has a LOT of ALPHA!😱 But it is a lengthy video (~1h 30min) I'm compiling the key ALPHAS for all of you that don't have that time, because it is a knowledge WORTH having🧵
12K
bogo
@xb0g0
Apr 6, 2024
I spent the day analyzing the security implications of the 63/64 gas rule in Ethereum. The occasions where it can lead to exploits are rather rare, but they still exist. In case your protocol has logic depending on gas calculations it's important you're aware of it. This
12K
bogo
@xb0g0
Sep 24, 2024
I have collected my MOST IMPACTFUL content into a BLOG. 🧠 b0g0.xyz/blog?read Each article is a product of intense research or simply fragments of my audit experience, shaped by sleepless nights and pure grind.💪 The positive community feedback was the proof of VALUE 🪙
5.7K