riptide & j4x discuss coming from cybersec and web2 CTFs to web3, a deep dive on rust, the contest game before and now, focusing on less popular languages, nomad bug hunting, why failing high school french and working at a call center helped him as a bug hunter, and much, much, more ...

riptide & tim discuss competitions at immunefi, conditional pots, making the game fair, backroom dealing and shift protocols, why SRs should participate, proxy negotiation, and much, much, more ...

riptide & patrick Patrick Collins (co-founder of @cyfrinaudits, @soloditofficial, @codehawks, and @cyfrnupdraft) discuss how he got here and why he's building in crypto, web3 security and where its going, contests and codehawks, properly incentivizing bug hunters, how money drives decisions, his motivation behind educating bug hunters, a juicy ALPHA DROP for the gym, and much, much, more ...

riptide and alix40 discuss soloaudit: his public good contribution to the security space where devs can find independent security researchers for hire, why valkyrisecurity is offering web2 & web3 security reviews, web2 bug hunting vs web3, web2 defi attack points, how we make this space secure for both grandma and JP Morgan, AI audits, and much, much, more ...

riptide & adrian hetman discuss running the triage department at immunefi, how to write the best bug report, using LLMs wisely, how your report is viewed by triagers and the protocol team, why reports get rejected, cleaning your brain's cache to improve your bug hunting, a juicy ALPHA drop, and much, much, more ...

riptide & montyly (josselin feist, humble slither creator) discuss his tenure at trailofbits, web2 vs web3 security posture, security tooling, internalizing security and solving the human problem, concolic execution/hybrid fuzzing, using LLMs as a force multiplier, an ALPHA drop, why putting underscores in your file names is 32337, and much, much, more ... 

riptide & the Obsidian audit team (0xjuann & 0xspearmint) discuss their Fraxlend high severity bug find including a deep dive into ERC4626 vaults, helping hyperliquid builders with their hyper-evm-lib public good, how they use automated tooling during audits, why you should drop out of med school to be an auditor, defi strategies and risk tolerance, alpha drops, and much, much, more ... 

riptide & mackenzie discuss the inner workings of immunefi, what happens behind the scenes as soon as you click submit on that juicy bug report, mackenzie's unique omniscient view of bug reports and bug hunters, how to up your negotiation game to get paid, and much, much, more ... 

riptide & danielvonfange discuss running a bug bounty program at Origin and dealing with LLM spam and bounty sizing, how he creates tests and invariants, hunting bugs before you were born, the challenges of selecting audit partners, security in crypto now vs the past, why devs and auditors should cross-train, why PHP rules, and how morals, ethics and incentives intersect in crypto, and much, much, more ...

riptide & chasethelight discuss how getting rugged on BSC led him to create his automated bug finding tool Lightchaser, why programming in C and ASM can make learning new languages easier, why static and dynamic analysis trumps LLMs, why you should dig deeper to outperform automated bug detection, why we need bounty hunters and the importance of manual review, how Lightchaser V4 is leveling up bug detection, and much, much, more ...