Egor Salmin @salmindev

@abrahamonchain Done

🚨😱From zero Solidity knowledge to a $135,000 confirmed critical bounty in 2.5 months. Here is the story: Before Web3 security, he was a software engineer building AI agents, with a strong JS background. That helped him pick up Solidity fast. He started learning Solidity at the end of November 2025. By mid-February 2026, he had already found his first critical bug on Immunefi. AI helped him move faster too: understanding protocols, brainstorming attack paths, reviewing assumptions, and figuring out where bugs could hide. But the real separator was still the mindset. It was grinding 12–14 hours a day, 6 days a week, switching from “developer” to “attacker” mindset, and refusing to quit during the hard phase. For new Web3 bug hunters: You do not need 5 years before you find real bugs. But you do need obsession, consistency, protocol understanding, attack intuition, and the ability to keep going when nothing clicks yet. The learning phase ends when the real hunting starts. Beast!👏 @Omisanin0

keyboard_arrow_left Previous keyboard_arrow_right Next

Explaining Ethereum to a kid using Roblox as an example 🎮🧒: Imagine the Roblox devs took away all your skins and valuable items you've been grinding for forever 😭💔. Sucks, right? Well, if your Roblox was a decentralized app (dApp), no one could ever do that 🛡️✨. A decentralized app is an app where nobody can touch your stuff without your permission 🔐. These kinds of apps live on a huge shared planet called Ethereum🌍⛓️. The main currency on this planet is Ether (ETH) - kinda like Robux 💎💰. You can use it to buy stuff or pay for programs to run. And you can access this planet from anywhere in the world, as long as you've got internet 🌐📶. The coolest thing here is smart contracts🧠📜. Think of them like vending machines 🤖🛒. Wanna sell a skin to some dude you barely know without getting scammed? 😬🤝 You both "plug in" your crypto wallets to the vending machine. He puts coins into the machine 💵, you put your skin in 👕. The machine automatically swaps them: the coins fly to you 💸, the skin flies to him 🎁. Fair and square, no one can cheat ✅🤝. To power this vending machine (and the whole network), you have to pay a small fee called gas ⛽. Gas is priced in tiny crumbs of Ether 💎. Oh, and on Ethereum, you can totally create your own in-game money (tokens) 🪙🎮. For regular coins that are all the same, you'd use something called the ERC-20 standard 🟡. But if you want to create unique stuff - like skins, swords, or characters - you'd need the ERC-721 standard ⚔️👾✨. That's what makes them one-of-a-kind items no one can just copy or delete 🎨. How would YOU explain it? Drop your version in the comments :) #Web3 #Ehereum #Crypto #Roblox

@anchabadze It's inspiring! ✊

Switched to Brave browser. Brave is so far the only browser where Web3 isn't an add-on in the form of an extension store (which often steal data), but an architectural principle. What browser do you use? #brave #web3 #crypto

@yusufthebdev Valuable words 🙏

@thisisparthbtw To enjoy life

@connectwithtola More than 90%

Main types of L2 solutions: State channels - a P2P protocol created between two parties that allows them to make multiple transactions with each other. Sidechains - separate blockchains connected to main network through a two-way bridge. Plasma - a structure of nested "child chains" inside the main "root chain". Rollups - the most popular approach: transactions on L2 are compressed into batches and sent to L1. #layer1 #layer2 #Web3‌‌

The blockchain trilemma is a concept popularized by Vitalik Buterin. According to it, it is impossible to make a blockchain perfect in all three key areas: decentralization, security, and scalability. Usually, security and decentralization remain the top priorities, which is why L2 and L3 scaling solutions appear. Read more below. #blockchain #crypto

@pamilhereen @Nannoyapp ThinkPad 😍 Good luck!!

3/ ⚠️ Yearn.finance Exploit History: 2021 - v1 yDAI Vault hacked, ~$11M lost; the team responded within 11 minutes, protecting another $24M 2023 - exploit of the old yUSDT / iearn contract, losses about $10–11.5M 2025 - yETH exploit, losses around $9M, caused by custom code Yearn also has a dedicated security section, a vulnerability disclosure process, and a bug bounty program up to $200,000 🛡️ #web3 #exploit #bugbounty

2/ ⚡ Fair Launch: All tokens were distributed among users: No premine; No allocations for funds; No separate team rewards. The main product of Yearn.finance is automated Vaults. Vaults allow users to deposit assets, while the protocol automatically applies strategies to generate yield. In addition, the Yearn ecosystem includes various projects and interfaces, like yswap, ytrade, and others.

1/ I decided to gather some information about yearnfinance 📌 Yearn.finance is a decentralized platform that helps users deploy their assets and earn yield 📈 The project simplifies complex DeFi strategies: users don’t need to search for the best rates, move assets between protocols, or dive deep into technical details. In short, Yearn.finance is an automated yield aggregator. It pools liquidity across multiple DeFi protocols, like Aave, Compound, Curve, to find the most profitable opportunities. 💎 The project has its own token YFI (~$2,252.17) 📦 Total and maximum supply - 36,666 coins YFI is a governance token. Token holders can participate in decision-making and vote on community proposals #yearnfinance #web3

10,000 BTC for two pizzas. 🍕 On May 22, 2010, Laszlo Hanyecz bought the most expensive lunch in human history. Today, that's billions. Back then - $41. Thank you to that guy for proving that crypto works in the real world. Happy #BitcoinPizzaDay. 🧡

@rohankanojia_in @CyfrinUpdraft @PatrickAlphaC Don't stop!!

promised myself i'd post every day. disappeared for 3 days. realized that judging my motivation by post dates is a bad metric for me. new rule: i post when i actually understand something. not on schedule. back to learning.