Тёмный

First Month as a Smart Contract Auditor 

Andy Li
Подписаться 13 тыс.
Просмотров 12 тыс.
50% 1

What is it like working as a smart contract auditor at an audit firm. What the job is actually like, what I do day to day, pros and cons vs an independent researcher and future goals.

Опубликовано:

 

19 янв 2023

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 96   
@CyberZyro
@CyberZyro Год назад
for anyone who are struggling growing into the field, invest much time in leaning the fundamentals and go through all the bootcamps and free classes out there Just dont lose hope! and never give up~. moreover thanks for awesome people like Andy, Patrick and everyone outthere helping the people in the community, waiting for my turn to give back to the community too i will not stop learning, again Thanks for the motivation and resources Andy
@andyli
@andyli Год назад
Yep, the learning curve in the beginning is quite steep but it gets easier over time
@CyberZyro
@CyberZyro Год назад
@@andyli exactly!
@engstrikewebsite7236
@engstrikewebsite7236 Год назад
You're a great motivator, man! Wish you all the best!
@andyli
@andyli Год назад
Thanks, you too!
@PatrickAlphaC
@PatrickAlphaC Год назад
Awesome video Andy, keep it up
@andyli
@andyli Год назад
Cheers Patrick! Thanks for your Solidity tutorials for on-boarding me :D
@PatrickAlphaC
@PatrickAlphaC Год назад
@@andyli 🔥🔥🔥🔥
@yahiakhaled4373
@yahiakhaled4373 Год назад
@@andyli Which one you mean? This (16 hrs) one ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-M576WGiDBdQ.html - OR- This (32 hrs) one ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-gyMwXuJrbJQ.html ?
@andyli
@andyli Год назад
32hr
@yahiakhaled4373
@yahiakhaled4373 Год назад
@@andyli thanks
@code46ash
@code46ash Год назад
Andy your awesome and keep up the good work
@andyli
@andyli Год назад
Thanks! Will do!
@soaphornseuo8630
@soaphornseuo8630 Год назад
I am so proud of you
@andyli
@andyli Год назад
cheers!
@mlntdtechbae
@mlntdtechbae Год назад
I'm finally learning to code smart contracts now. Good info to keep in mind as I get through the auditing part.
@andyli
@andyli Год назад
Nice
@itsmattdunn
@itsmattdunn Год назад
Nice work, good to hear the switch is paying off!
@andyli
@andyli Год назад
Thanks!
@ouailtayarth4012
@ouailtayarth4012 Год назад
Thanks for the great content!!
@andyli
@andyli Год назад
No worries!
@thinkingonyx847
@thinkingonyx847 Год назад
I laughed when you piled on those rekt leaderboard stats haha
@andyli
@andyli Год назад
😂
@vivahouse17
@vivahouse17 5 месяцев назад
Hi, Andy. Great content and thanks for your thoughts on web3 sec. What are the typical questions for someone applying for a junior smart contract auditor on a job interview? Would love to hear you opinion on that one❤
@HT_Ray
@HT_Ray 2 месяца назад
Andy I love your honest upfront style. Am I too late to get in with zero coding experience?
@detective5253
@detective5253 9 месяцев назад
New member here. Loved your content a lot. It's my honor to be a part of the community
@andyli
@andyli 9 месяцев назад
cheers!
@nathanaelanderson6737
@nathanaelanderson6737 3 месяца назад
Hey Andy, I am sydney based and just starting my journey into this field. Would love to connect professionally with you! Great video man and I love your channel, hoping to hear back from you!
@arslanelahmer2729
@arslanelahmer2729 6 месяцев назад
Hello Andy, thanks for the great content! Just want to know how long it took for you to land a job in the industry. Wish you all the best!
@samratgupta8487
@samratgupta8487 Год назад
Web3 security is Goldmine for researchers
@andyli
@andyli Год назад
💯
@kingpin3825
@kingpin3825 Год назад
Hopefully, someday I will secure a job geek as well
@andyli
@andyli Год назад
👍
@manav2003
@manav2003 Год назад
Hey you are my motivation boy I joined code4rena hardly 1 month ago and my place is 900 all time and top 200 on 60 days After more learning like you want to join a audit company it's my goal BTW thank you Andy for this type of motivation
@andyli
@andyli Год назад
good stuff, keep it up
@niyom8866
@niyom8866 Год назад
hi bro., can you send me telegram reddit or linkedin id., wanted to know your approach
@andyli
@andyli Год назад
@@niyom8866 see the ABOUT section on my channel
@MoCrits
@MoCrits Год назад
Iam Really happy for you, man. I recently got a job offer for a test automation engineer and another offer as devops. Should i take the first offer to be more prepared for a web3 security transition. Or QA is irrelevant to web3 security. Because if that is the case i will take the devops one it pays 1.5x the test automation offer
@andyli
@andyli Год назад
It is hard to say just from the job titles, since the actual job might be very different from the job description. QA is not irrelevant because we write a lot of tests and PoCs during audits.
@peter9910
@peter9910 8 месяцев назад
For Code4rena, would you typically submit PoCs with your medium and high severity findings?
@daniellk3
@daniellk3 Год назад
Hi Andy, great content! When you get paid from your company do you have to set up your own company and do all the taxes yourself? or do you do it through a platform like deel?
@andyli
@andyli Год назад
I don't need to setup own company, we just get paid like a normal employee with taxes taken out before getting paid
@noone-ld7pt
@noone-ld7pt Год назад
Hey so I am looking to break into cyber security in 2023, and was pretty convinced that the standard cert road was the way to go. I've passed the Sec+ but after seeing you latest videos I am a bit conflicted as t whether I should go after the OSCP or focus solely on Web3. OSCP seems like the safe and well tread path but like you've said getting in early on web3 sec could be a gamechanger, especially if it really blows up! I watched your conversation with Tyrese and Amaechi but I am still a bit confused, would you be able give me like 3 or 4 bullet points you would consider as the essential steps to getting a job at an auditor firm?
@andyli
@andyli Год назад
Yeah you're right, OSCP is still good to get into cyber security. It depends on where your interests lie. Nothing wrong with getting into cyber security first then deciding what to specialise in, because I would consider web3 a niche of cyber security. Check out the video I made on "Beginner Roadmap", it covers all the steps I took
@noone-ld7pt
@noone-ld7pt Год назад
@@andyli Oh thanks so much for responding! I will absolutely do that!
@kchmielewski
@kchmielewski Год назад
Hey Andy, thanks a lot for the update! Did you have to set up a company to be paid like a contractor or something? I know this will vary from country to country, but how do remote workers handle taxes with their local government?
@andyli
@andyli Год назад
No need, the company is actually based in Australia
@kchmielewski
@kchmielewski Год назад
@@andyli Oh, that's nice. Thanks!
@WebThree360
@WebThree360 Год назад
Nice Content Andy Just getting my ass into SC auditing now. Learning Solidity atm although I have no prior programming experience though but I have been in web3 for a while and recently decided to pivot to SC auditing. Any recommendations for me?
@andyli
@andyli Год назад
yep, after learning solidity go through this github.com/x676f64/secureum-mind_map
@WebThree360
@WebThree360 Год назад
@@andyli Secureum, yeah sure. Will definitely go through it too. Thank you 🙏🏽
@medhasni6432
@medhasni6432 Год назад
Andy do you use any tools while auditing? Like these ones like hardhat, foundry, slither..
@andyli
@andyli Год назад
Yep, both slither and foundry
@betterthanb4r
@betterthanb4r Год назад
Hello ANDY, is learning sc testing is worth it(learning javascript)?? you just mentioned about writing uint test scripts.
@andyli
@andyli Год назад
Mainly you need to learn Solidity
@tahamasood2584
@tahamasood2584 Год назад
Do we need to write some soliditiy code to exploit the vulnerability? OR to Submit the Vulnerability does we need to write some code to tell them how this could be malicious?
@andyli
@andyli Год назад
Yes need to write code to show the vulnerability
@drugstorecowboy7569
@drugstorecowboy7569 Год назад
I started doing C4 around 3 months ago and I have found quite a lot of bugs so far. Also some unique ones. Do you think it is possible for me to get an auditor job? I am currently enrolled in university so no degree yet. I'd like to have a job not for the money primarily but to get some professional experience and learn from others. Would be really happy if you can answer :)
@andyli
@andyli Год назад
Some places have internships you can apply for. You can also join secureum or yAcademy to audit with high level people.
@drugstorecowboy7569
@drugstorecowboy7569 Год назад
Thanks! I assume there are also internships that are remote?
@andyli
@andyli Год назад
@@drugstorecowboy7569 yeah all remote
@raferguo2618
@raferguo2618 4 месяца назад
what course do you learn before you became a auditor?
@blisscrypto5878
@blisscrypto5878 Год назад
Wow! Any suggestions where to start?? I used to work as auditor in financial firm
@andyli
@andyli Год назад
Yeah learn from here: github.com/x676f64/secureum-mind_map I also made a beginner roadmap video last year
@theybecameus
@theybecameus Год назад
can u make a roadmap on how on with zero tech background can get into this step by step
@andyli
@andyli Год назад
yeah I made a road map video on the channel, have a look in the code4rena playlist
@theybecameus
@theybecameus Год назад
@@andyli this is the video u talking about right? ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE--469Gcye-ZE.html&ab_channel=AndyLi
@andyli
@andyli Год назад
@@theybecameus yep
@Robinson-lw7ys
@Robinson-lw7ys Год назад
Dope video. Do you plan on introducing a Smart Contract Audit Course in the future ?
@andyli
@andyli Год назад
Thanks. Not in the near future, I usually just point people towards learning resources made by other people.
@sanvidpathak6214
@sanvidpathak6214 Год назад
Where can I learn smart contract auditing? And where can I find the bug reports?
@andyli
@andyli Год назад
Code4rena.com for bug reports, secureum for a free resource to learn
@medvisstre
@medvisstre Год назад
Where to look for or what options do you have if you want a rust smart contract audit but can not spend more than 15k?
@andyli
@andyli Год назад
Your best bet would be an independent auditor
@medvisstre
@medvisstre Год назад
Any recommendations?
@andyli
@andyli Год назад
@@medvisstre dm me on twitter with some details, I might be able to connect you with one of my contacts
@serousetrick
@serousetrick Год назад
Are mentioned salary numbers represent salary before or after tax?
@andyli
@andyli Год назад
Before tax
@anuraghere4997
@anuraghere4997 11 месяцев назад
Sir how to get started in this field. Any books or resources will be welcome
@andyli
@andyli 11 месяцев назад
see the roadmap video
@solomonshabat4542
@solomonshabat4542 Год назад
Sir can you describe the fully roadmap of the Smart contract Auditor? Thanks
@andyli
@andyli Год назад
I made a roadmap video last year
@solomonshabat4542
@solomonshabat4542 Год назад
@@andyli and what's the duration sir?
@jayendrabhagat3607
@jayendrabhagat3607 Год назад
I want to be auditing intern, any recommendations?
@andyli
@andyli Год назад
Join Secureum and yAcademy. Also reach out to auditing firms to see if there are any internships
@asphalt_therapy
@asphalt_therapy Год назад
do you get paid in USD or any stable coin?
@andyli
@andyli Год назад
I think there is the option to be paid in crypto but I get mine in my local currency
@theybecameus
@theybecameus Год назад
is your job completely remote?
@andyli
@andyli Год назад
yep
@loserdavictor
@loserdavictor Год назад
gm
@andyli
@andyli Год назад
Gm
@jingli9232
@jingli9232 Год назад
will ai replace smart contract auditor in the coming years, the trend seems obvious
@andyli
@andyli Год назад
I see ai being able in aid in auditing, not replace
@lukad6375
@lukad6375 Год назад
Hey Andy, how many hours do you work per day as a auditor (only in audit company)?
@andyli
@andyli Год назад
Normal hours 38hrs a week
Далее
Unhacked CTF - Reaper
20:57
Просмотров 3,4 тыс.
Beginner Roadmap to Smart Contract Auditing
28:31
Просмотров 32 тыс.
How to become the #1 Auditor in Web3
8:11
Просмотров 19 тыс.
My First Bounty Award
11:39
Просмотров 9 тыс.
Complete Smart Contract Auditing System
24:52
Просмотров 4,7 тыс.
My CV - Getting a JOB as a Smart Contract Auditor
18:58
Highest Paid Blockchain Jobs 2023
7:26
Просмотров 3,5 тыс.