Тёмный

Too Late to Learn Web3 Security 

Andy Li
Подписаться 13 тыс.
Просмотров 12 тыс.
50% 1

Is it still worth it to learn web3 security now? Are the bounty rewards still good? My thoughts around whether it is still worth participating in audit contests on code4rena, and my future plans.

Опубликовано:

 

15 сен 2024

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 59   
@rokinot5523
@rokinot5523 2 года назад
I think the reason why that high vuln payout was so low was because it was a low hanging fruit finding, almost 30 ppl found it and it was a very simple mistake to spot, which is why the rewards were so diluted. Some recent high vuln findings, if unique, were paying >5k for some contests, so there's still a chance to make some good amount
@andyli
@andyli 2 года назад
True, we need to find uniques to get paid well now. Not easy though, I have not gotten a unique finding yet!
@cowsecurity
@cowsecurity 2 года назад
Great work buddy, also thanks for accepting my request on linkedin!
@andyli
@andyli 2 года назад
Thanks, good to connect!
@arslanelahmer2729
@arslanelahmer2729 10 месяцев назад
what's the situation one year on?
@jaym4697
@jaym4697 2 года назад
Great content. Keep it up!
@andyli
@andyli 2 года назад
Thanks!
@lacag-lacag
@lacag-lacag 2 года назад
Thanks keep the update man.
@andyli
@andyli 2 года назад
Will do!
@soaphornseuo8630
@soaphornseuo8630 2 года назад
Thank brother 😀
@andyli
@andyli 2 года назад
No problem!
@qu4ku
@qu4ku 2 месяца назад
the rewards are huge precisely because there is no competition (talent is scarce), when the talent is not scarce there is commoditization = even highs are worth $50/$500 (it's not different than thousands of indians available to make you an website).
@aftabkhan2677
@aftabkhan2677 Год назад
Hi Andy, I am 19 just starting into web3. I am no previous experience in coding I am noob in coding, should I learn java script first or solidity ? In the article you mentioned in the road map of web3 security. its tolded to learn java first.
@andyli
@andyli Год назад
I would say Solidity first, go through the 32 hour solidity tutorial on youtube
@aftabkhan2677
@aftabkhan2677 Год назад
Thank you will do that.
@linuxinside6188
@linuxinside6188 2 года назад
Great content andy 👌, thank you.
@andyli
@andyli 2 года назад
🙌
@tangjunnz
@tangjunnz 2 года назад
Thanks
@andyli
@andyli 2 года назад
:)
@mujtabaaltayib7417
@mujtabaaltayib7417 2 года назад
I'm still confused on it but thanks for the guidance for the beginners like me
@andyli
@andyli 2 года назад
No problem, feel free to ask any questions
@serousetrick
@serousetrick Год назад
Any advice on what can be profitable but still less competitive area of web3, like what smart contract auditing was a year or two ago?
@andyli
@andyli Год назад
No easy profits now since we are in a crypto bear market. Learning to become a dev/auditor in web3 is still going to pay off long term.
@fuffsec
@fuffsec Год назад
Great content. Thank you so much
@andyli
@andyli Год назад
🙌
@digitalchinmay263
@digitalchinmay263 2 года назад
Hey do you know any other platforms other than code4rena, like one that accepts gas opt etc. ? I'm asking about permissionless open platforms.
@andyli
@andyli 2 года назад
I don't know of any others that accepts QA and gas ops.
@digitalchinmay263
@digitalchinmay263 2 года назад
@@andyli And other audit platforms ? Like code4rena and immunefi ?
@tomj1883
@tomj1883 2 года назад
yea I feel this too but I will definitely continue participating in code4rena because Im there to learn, not the money :) Thanks for the great content!
@andyli
@andyli 2 года назад
yep 100%, money is just a bonus
@devabdee
@devabdee 2 года назад
TY. Sir
@andyli
@andyli 2 года назад
👍
@zerocool2765
@zerocool2765 2 года назад
Should I start my journey in web 3 bug bounty or traditional bug bounty?
@andyli
@andyli 2 года назад
web3 has bigger long term upside I think
@luce36
@luce36 Год назад
This channel is amazing!
@andyli
@andyli Год назад
Thanks! 😃
@HelloWorld-sy4yc
@HelloWorld-sy4yc 2 года назад
Ohh, u get it. It's cuz of your videos, dude...
@andyli
@andyli 2 года назад
It can't *all* be because of my videos lol
@devone7702
@devone7702 10 месяцев назад
I'm a proframmer, who is starting his journey in traditional bug bounty. Do you think it's better to learn web3 bug bounty instead ?
@andyli
@andyli 10 месяцев назад
try some CTFs and see if you enjoy web3
@emmanuelochubili
@emmanuelochubili 2 года назад
@Andy please what are the requirements .. if i am a begginer in bug bounty
@andyli
@andyli 2 года назад
Start with doing Ethernaut CTF, I made a video on beginner road map
@emmanuelochubili
@emmanuelochubili 2 года назад
@@andyli thanks man.. will look for the link
@ashhadali7592
@ashhadali7592 2 года назад
So i start it or not whats ur advise? i already do web 2 bug bounties intrested to learn web 3 your advise save mu time
@andyli
@andyli 2 года назад
Depends on if you are doing this full time and how much you are currently earning in web2 bounties. It is still possible to make $500-$1000 per month doing this part time, and of course the long term upside is huge
@ashhadali7592
@ashhadali7592 2 года назад
@@andyli no part time In web 2 mar earning is 1000-2000$ 2) part time 1000$ is good so u mean i start it Thank you Very much u help me alot
@eugenionull9758
@eugenionull9758 2 года назад
same feeling here... it's over
@andyli
@andyli 2 года назад
Sad 😥
@farena.human_
@farena.human_ Год назад
Is it right time to learn web3 security? I mean now days
@andyli
@andyli Год назад
Yep, good time
@farena.human_
@farena.human_ Год назад
@@andyli thanks
@goodboy9758
@goodboy9758 2 года назад
psyops
@andyli
@andyli 2 года назад
🤯
@bluelantern5241
@bluelantern5241 2 месяца назад
Bro youve got to stop making that "suck" noise. Have you ever gone back and listened. Holy cow
@haanrey
@haanrey Год назад
Don't take advice from everyone. I had found a $$$$$ bug in one of the oldest programs in bugcrowd . The bug was 5 years old .
@andyli
@andyli Год назад
damn, congrats
@haanrey
@haanrey 8 месяцев назад
@@andyli coming here after a year , I am sorry for being rude while commenting . I wish you more success .
@priyanshujaswal2210
@priyanshujaswal2210 3 месяца назад
​@@haanreyAt least you learnt brother. And doing this after a few months shows that you are a good person 😊
Далее
Over 10k Achieved in Web3 Bounties
23:12
Просмотров 3,6 тыс.
Beginner Roadmap to Smart Contract Auditing
28:31
Просмотров 34 тыс.
World’s Tallest Man VS Shortest Woman!
15:07
Просмотров 13 млн
Here's My Plan | Where Web3 Security Is Going
32:42
Просмотров 2,9 тыс.
First Month as a Smart Contract Auditor
8:46
Просмотров 12 тыс.
Blockchain CTFs - Learn Web3 Smart Contract Exploits
11:27
Complete Smart Contract Auditing System
24:52
Просмотров 5 тыс.
Learn from Reading Audit Reports (Sturdy Report)
18:15