Samarth (@Sam39741) header
Samarth (@Sam39741) profile picture

Web3 security. Building audit tooling. Documenting live findings.

Joined September 2023
Photo by Samarth (@Sam39741)Photo by Samarth (@Sam39741)Photo by Samarth (@Sam39741)Photo by Samarth (@Sam39741)Photo by Samarth (@Sam39741)Photo by Samarth (@Sam39741)Photo by Samarth (@Sam39741)Photo by Samarth (@Sam39741)Photo by Samarth (@Sam39741)Photo by Samarth (@Sam39741)
Got my first real bug, not one but 5 of them.....4 highs and 1 Medium. Took exactly 56 days of going all in. Will publish about each soon. More to come 🤞🏼💪🏼
6
13
872
Samarth retweeted
I need to see a 7 figure bug bounty in web3 security like right now
9
4
150
6,395
Samarth retweeted
Security is one of the few skills that gets more valuable every time someone ships code. And now everyone is shipping more code than ever. Keep pushing🫡
2
3
57
1,211
Got a Critical, but cannot submit as buyhakte is flagged by UPI and cannot fund my metamask with USDC. 🥲🥲
1
1
65
The ai harness I open sourced a few days ago has now an update, now it also runs foundry tests on the hypothesis it built, then we can confirm a finding. Working on the go as I hit some issues myself during the hunts and audits, trying to solve by building what I wish I had. @pashov @asen_sec github.com/SamarthShukla17/h…
14
710
Hound is putting in the work for me lately. It has been a really good tool till now and I am looking forward to calibrate it for specific hunts and audits, that would come pretty handy in contests and audits. Till now have lead me to around 10+ direct/indirect finds, most of them came out dupes yet they were never publicly known or disclosed till that point so its a pretty great result. github.com/SamarthShukla17/h…
5
188
Samarth retweeted
Security Researchers obsessing over tokenmaxxing and modelmaxxing are not going to make it Been seeing whitehats go beastmode on a $200 gpt/opus plan, crushing findings left & right - get your harness right, the model doesn't matter and more tokens is rarely the answer🙏
15
18
3
309
16,270
I have open sourced the ai harness that I made for security research, it produces the correct areas to look for the vulnerabilities and fails in spotting the correct bugs directly, still in early phase. Thanks to @asen_sec for the guidance on custom tooling via his blogs github.com/SamarthShukla17/h…
7
14
2
117
7,538
I use it predominantly for first passes, and am looking to make it better so it can help me more for the hunts and audits.
5
672
Samarth retweeted
when I say "we" in emails, this is who I mean:
136
1,813
141
21,443
576,367
Touched some grass....now back to grind!
4
144
People are hacking billions, whitehats are saving billions and here am I fighting the wifi network in my hostel 🤡
1
102
Well I think I have a better answer: Earn a lot $$$ and retire in someplace like Northern Norway where people forget time and hang my watch on the bridge like people there do or do farming or some hobby 😇
Every security researcher has an origin story. What made you pursue security research? 👇
1
64
Samarth retweeted
🚨Over $5.6B stolen from Binance, biggest hack in crypto history Seems ~2B of USDC/USDT were frozen by Tether & Circle, it's highly likely the other Binance listed tokens will be dumped
28
39
20
388
30,241
Thanks to @asen_sec & @pashov for the information they share to get started and also about building tooling of own, it helped a lot.
1
39