Web3 Security Hangout: Hake, Pashov & Andy

0:00 Audit Workflow
18:56 ChatGPT
23:40 Immunefi
30:10 Work Life Balance
33:45 Yearn Finance 10m Hack
40:34 Audit Process
46:57 Pattern Matching Bugs
57:32 Operational Security
59:40 Goals For 2023
1:12:05 Becoming an Auditor vs Developer
Links:
/ hake_stake
/ pashovkrum

[@Ishirosama]

Love this content format!
Thanks guys, learnt a lot of things again.
I've started contests last month, and your advices, or even talking about how you works helps a lot.

[@andyli]

Great to hear!

[@sergiocuadrado1088]

Am loving this series! Would love to see an interview with the great 0x52

[@andyli]

will try to get him on

[@cy6erninja757]

I love this video for its opportunity to take a sneak peek into the life and thought process of great auditors! It is a great inspiration. Thanks guys for being public.

[@jingli9232]

andy makes me laugh by saying it's almost like you're part of the rug pull crowd, hahahaha, seems like Pashov really want to be part of that team

[@opensensepw]

Hey Andy Li, OpenSense wants to bring you for a talk, would you be available?

[@andyli]

dm me on twitter

[@loserdavictor]

good going ser🐧🐧

[@andyli]

🫡

[@ninesynops]

Hey Andy, great hearing about testing framework discussion at the end. I already am familiar with Python and looking to learn Solidity now. Should I just go the Brownie/Foundry pathway or spend extra time learning JS to use Hardhat? When auditing do you need to read much JS or its mainly just Solidity? Keep up the great content mate :)

[@andyli]

Foundry is what you want to learn

[@shakirjamal5694]

Please interview great 0x52

[@andyli]

will try to get him on

[@steev910]

I'm still learning solidity I haven't started smart contract auditing yet, I don't know if I have such a good level in solidity to begin with

[@andyli]

it doesn't take long to get good enough with Solidity to start auditing, see Patrick Collin's tutorials

[@steev910]

@@andyli thanks for the answer and for this amazing sharing

[@bowtieddravee]

28:55 : Dravee motivating people again 😂
35:22 - 35:32 : Couldn't stop laughing at Pashov's reaction 🤣🤣🤣

[@andyli]

Dravee's words pierce through the veil of doubt and hesitation, igniting a fiery determination within each person to conquer their fears and seize their dreams.

[@LolLol-dj1tf]

For smart contract audit, what tools people use, do they change tools? Do they all just use one tool like slither? Or combined like slither and security or mythril as well

[@andyli]

It is mostly manual audit

[@LolLol-dj1tf]

@@andyli Oh what really? Why don't you use any tools?

[@husseinhayder836]

Will web security 3 last for the next 30 years or will it end in the near future?

[@andyli]

Hard to predict that long out, this industry has only been around for a few years

[@ranjansoumyab1963]

code4rena seems a little confusing while getting registered 😒

[@andyli]

try asking in the discord