@windhustler

@windhustler

Ex-Petroleum Engineer & Smart Contract Developer | SR @Spearbit | SR @Sherlock

Words of Wisdom

---

"Breaking Versus Understanding"

Focus on breaking the codebase rather than understanding it. Many bugs are slight logical inconsistencies that don’t even require understanding the whole picture.

Many times focusing too much on the bigger picture will yield some high-level, economical attacks but might miss out on function-specific edge cases.

"Don't Run in Circles"

It’s very common for auditors to keep on checking the same scenarios.

If you're doing this, just remind yourself that this is a form of procrastination, and the only added value is in checking those 1% complex scenarios that are hard to grasp.

"Inspire Yourself"

Go over all the bugs that are found in similar protocols on Solodit to direct your thinking and get ideas flowing.

It is the hardest to find any bugs when you don't know what you're looking for.

"Use AI"

Use AI tools to speed up the understanding of the codebase and to generate ideas.

If you don’t have a co-auditor on a project AI can be extremely useful. Just don’t expect it to give you accurate answers every time, it’s only a tool and it’s up to you to make sense of its suggestions.