AuditPortfolio

About

Oot2k has collaborated with leading security platforms such as Sherlock, Immunefi, and Bailsec to help secure high-profile projects including Aave, 1inch, Symbiotic, and Nouns DAO. They have completed a total of 33 security audits and submitted three rewarded reports through bug bounty platforms. Several of these audits were conducted in collaboration with renowned auditors including thekmj and Shogoki. Their work primarily focuses on decentralized finance (DeFi), with a selection of their most interesting findings highlighted below under Interesting Discoveries.

Live vulnerabilities

Security Audits and Bug Bounty Contests

Supporting roles (Judge)

Oot2k has been the lead judge in multiple audit contests. In this role, they are responsible for creating the final report of all issues found during a bug bounty competition. To do this well, judges need a strong understanding of the system or protocol being tested so they can decide which issues should be included in the report for the client.

Glossary

Security contests

Cybersecurity contests are conducted on live code or code that is about to be released.
These competitions are mostly open to the public, where anyone can submit potential vulnerabilities to the development team behind the codebase.
Contests are a great form of audit because more people are looking at the code.

Judge

A judge on a bug bounty platform is someone who reviews security reports submitted by participants, verifies whether the issues are valid, and decides their severity and relevance. They ensure only accurate, impactful findings are included in the final results for the client.