First Month as a Smart Contract Auditor

[@CyberZyro]

for anyone who are struggling growing into the field, invest much time in leaning the fundamentals and go through all the bootcamps and free classes out there Just dont lose hope! and never give up~. moreover thanks for awesome people like Andy, Patrick and everyone outthere helping the people in the community, waiting for my turn to give back to the community too i will not stop learning, again Thanks for the motivation and resources Andy

[@andyli]

Yep, the learning curve in the beginning is quite steep but it gets easier over time

[@CyberZyro]

@@andyli exactly!

[@PatrickAlphaC]

Awesome video Andy, keep it up

[@andyli]

Cheers Patrick! Thanks for your Solidity tutorials for on-boarding me :D

[@PatrickAlphaC]

@@andyli 🔥🔥🔥🔥

[@yahiakhaled4373]

@@andyli Which one you mean? This (16 hrs) one kzbin.info/www/bejne/g2aaZ4p9nql1mrM - OR- This (32 hrs) one kzbin.info/www/bejne/naqwqIurf9eVgLM ?

[@andyli]

32hr

[@yahiakhaled4373]

@@andyli thanks

[@engstrikewebsite7236]

You're a great motivator, man! Wish you all the best!

[@andyli]

Thanks, you too!

[@soaphornseuo8630]

I am so proud of you

[@andyli]

cheers!

[@code46ash]

Andy your awesome and keep up the good work

[@andyli]

Thanks! Will do!

[@mlntdtechbae]

I'm finally learning to code smart contracts now. Good info to keep in mind as I get through the auditing part.

[@andyli]

Nice

[@itsmattdunn]

Nice work, good to hear the switch is paying off!

[@andyli]

Thanks!

[@thinkingonyx847]

I laughed when you piled on those rekt leaderboard stats haha

[@andyli]

😂

[@ouailtayarth4012]

Thanks for the great content!!

[@andyli]

No worries!

[@detective5253]

New member here. Loved your content a lot. It's my honor to be a part of the community

[@andyli]

cheers!

[@vivahouse17]

Hi, Andy. Great content and thanks for your thoughts on web3 sec. What are the typical questions for someone applying for a junior smart contract auditor on a job interview? Would love to hear you opinion on that one❤

[@kingpin3825]

Hopefully, someday I will secure a job geek as well

[@andyli]

👍

[@samratgupta8487]

Web3 security is Goldmine for researchers

[@andyli]

💯

[@arslanelahmer2729]

Hello Andy, thanks for the great content! Just want to know how long it took for you to land a job in the industry. Wish you all the best!

[@manav2003]

Hey you are my motivation boy I joined code4rena hardly 1 month ago and my place is 900 all time and top 200 on 60 days After more learning like you want to join a audit company it's my goal BTW thank you Andy for this type of motivation

[@andyli]

good stuff, keep it up

[@niyom8866]

hi bro., can you send me telegram reddit or linkedin id., wanted to know your approach

[@andyli]

@@niyom8866 see the ABOUT section on my channel

[@Ray_eddi]

Andy I love your honest upfront style. Am I too late to get in with zero coding experience?

[@Chantelle-c6w]

I really appreciate your efforts! Could you help me with something unrelated: I have a SafePal wallet with USDT, and I have the seed phrase. (alarm fetch churn bridge exercise tape speak race clerk couch crater letter). How should I go about transferring them to Binance?

[@nathanaelanderson6737]

Hey Andy, I am sydney based and just starting my journey into this field. Would love to connect professionally with you! Great video man and I love your channel, hoping to hear back from you!

[@noone-ld7pt]

Hey so I am looking to break into cyber security in 2023, and was pretty convinced that the standard cert road was the way to go. I've passed the Sec+ but after seeing you latest videos I am a bit conflicted as t whether I should go after the OSCP or focus solely on Web3. OSCP seems like the safe and well tread path but like you've said getting in early on web3 sec could be a gamechanger, especially if it really blows up! I watched your conversation with Tyrese and Amaechi but I am still a bit confused, would you be able give me like 3 or 4 bullet points you would consider as the essential steps to getting a job at an auditor firm?

[@andyli]

Yeah you're right, OSCP is still good to get into cyber security. It depends on where your interests lie. Nothing wrong with getting into cyber security first then deciding what to specialise in, because I would consider web3 a niche of cyber security. Check out the video I made on "Beginner Roadmap", it covers all the steps I took

[@noone-ld7pt]

@@andyli Oh thanks so much for responding! I will absolutely do that!

[@theybecameus]

can u make a roadmap on how on with zero tech background can get into this step by step

[@andyli]

yeah I made a road map video on the channel, have a look in the code4rena playlist

[@theybecameus]

@@andyli this is the video u talking about right? kzbin.info/www/bejne/Y2WZanqZrspgkKc&ab_channel=AndyLi

[@andyli]

@@theybecameus yep

[@kchmielewski]

Hey Andy, thanks a lot for the update! Did you have to set up a company to be paid like a contractor or something? I know this will vary from country to country, but how do remote workers handle taxes with their local government?

[@andyli]

No need, the company is actually based in Australia

[@kchmielewski]

@@andyli Oh, that's nice. Thanks!

[@MoCrits]

Iam Really happy for you, man. I recently got a job offer for a test automation engineer and another offer as devops. Should i take the first offer to be more prepared for a web3 security transition. Or QA is irrelevant to web3 security. Because if that is the case i will take the devops one it pays 1.5x the test automation offer

[@andyli]

It is hard to say just from the job titles, since the actual job might be very different from the job description. QA is not irrelevant because we write a lot of tests and PoCs during audits.

[@peter9910]

For Code4rena, would you typically submit PoCs with your medium and high severity findings?

[@daniellk3]

Hi Andy, great content! When you get paid from your company do you have to set up your own company and do all the taxes yourself? or do you do it through a platform like deel?

[@andyli]

I don't need to setup own company, we just get paid like a normal employee with taxes taken out before getting paid

[@sanvidpathak6214]

Where can I learn smart contract auditing? And where can I find the bug reports?

[@andyli]

Code4rena.com for bug reports, secureum for a free resource to learn

[@zhengzuo5118]

which firm?

[@medvisstre]

Where to look for or what options do you have if you want a rust smart contract audit but can not spend more than 15k?

[@andyli]

Your best bet would be an independent auditor

[@medvisstre]

Any recommendations?

[@andyli]

@@medvisstre dm me on twitter with some details, I might be able to connect you with one of my contacts

[@tahamasood2584]

Do we need to write some soliditiy code to exploit the vulnerability? OR to Submit the Vulnerability does we need to write some code to tell them how this could be malicious?

[@andyli]

Yes need to write code to show the vulnerability

[@SUPERMAN_I4G]

Nice Content Andy Just getting my ass into SC auditing now. Learning Solidity atm although I have no prior programming experience though but I have been in web3 for a while and recently decided to pivot to SC auditing. Any recommendations for me?

[@andyli]

yep, after learning solidity go through this github.com/x676f64/secureum-mind_map

[@SUPERMAN_I4G]

@@andyli Secureum, yeah sure. Will definitely go through it too. Thank you 🙏🏽

[@medhasni6432]

Andy do you use any tools while auditing? Like these ones like hardhat, foundry, slither..

[@andyli]

Yep, both slither and foundry

[@raferguo2618]

what course do you learn before you became a auditor？

[@blisscrypto5878]

Wow! Any suggestions where to start?? I used to work as auditor in financial firm

[@andyli]

Yeah learn from here: github.com/x676f64/secureum-mind_map I also made a beginner roadmap video last year

[@solomonshabat4542]

Sir can you describe the fully roadmap of the Smart contract Auditor? Thanks

[@andyli]

I made a roadmap video last year

[@solomonshabat4542]

@@andyli and what's the duration sir?

[@anuraghere4997]

Sir how to get started in this field. Any books or resources will be welcome

[@andyli]

see the roadmap video

[@betterthanb4r]

Hello ANDY, is learning sc testing is worth it(learning javascript)?? you just mentioned about writing uint test scripts.

[@andyli]

Mainly you need to learn Solidity

[@drugstorecowboy7569]

I started doing C4 around 3 months ago and I have found quite a lot of bugs so far. Also some unique ones. Do you think it is possible for me to get an auditor job? I am currently enrolled in university so no degree yet. I'd like to have a job not for the money primarily but to get some professional experience and learn from others. Would be really happy if you can answer :)

[@andyli]

Some places have internships you can apply for. You can also join secureum or yAcademy to audit with high level people.

[@drugstorecowboy7569]

Thanks! I assume there are also internships that are remote?

[@andyli]

@@drugstorecowboy7569 yeah all remote

[@serousetrick]

Are mentioned salary numbers represent salary before or after tax?

[@andyli]

Before tax

[@csjaybit]

I want to be auditing intern, any recommendations?

[@andyli]

Join Secureum and yAcademy. Also reach out to auditing firms to see if there are any internships

[@theybecameus]

is your job completely remote?

[@andyli]

yep

[@jingli9232]

will ai replace smart contract auditor in the coming years, the trend seems obvious

[@andyli]

I see ai being able in aid in auditing, not replace

[@asphalt_therapy]

do you get paid in USD or any stable coin?

[@andyli]

I think there is the option to be paid in crypto but I get mine in my local currency

[@Robinson-lw7ys]

Dope video. Do you plan on introducing a Smart Contract Audit Course in the future ?

[@andyli]

Thanks. Not in the near future, I usually just point people towards learning resources made by other people.

[@loserdavictor]

gm

[@andyli]

Gm

[@lukad6375]

Hey Andy, how many hours do you work per day as a auditor (only in audit company)?

[@andyli]

Normal hours 38hrs a week

[@unkillablespirits8582]

Hey you cant direct messagw youtubers only leave comments , would you like to join the IBIB ? Its a new bug hunting club .