Too Late to Learn Web3 Security

Is it still worth it to learn web3 security now? Are the bounty rewards still good? My thoughts around whether it is still worth participating in audit contests on code4rena, and my future plans.

[@rokinot5523]

I think the reason why that high vuln payout was so low was because it was a low hanging fruit finding, almost 30 ppl found it and it was a very simple mistake to spot, which is why the rewards were so diluted. Some recent high vuln findings, if unique, were paying >5k for some contests, so there's still a chance to make some good amount

[@andyli]

True, we need to find uniques to get paid well now. Not easy though, I have not gotten a unique finding yet!

[@lacag-lacag]

Thanks keep the update man.

[@andyli]

Will do!

[@cowsecurity]

Great work buddy, also thanks for accepting my request on linkedin!

[@andyli]

Thanks, good to connect!

[@jaym4697]

Great content. Keep it up!

[@andyli]

Thanks!

[@soaphornseuo8630]

Thank brother 😀

[@andyli]

No problem!

[@qu4ku]

the rewards are huge precisely because there is no competition (talent is scarce), when the talent is not scarce there is commoditization = even highs are worth $50/$500 (it's not different than thousands of indians available to make you an website).

[@linuxinside6188]

Great content andy 👌, thank you.

[@andyli]

🙌

[@arslanelahmer2729]

what's the situation one year on?

[@mujtabaaltayib7417]

I'm still confused on it but thanks for the guidance for the beginners like me

[@andyli]

No problem, feel free to ask any questions

[@luce36]

This channel is amazing!

[@andyli]

Thanks! 😃

[@tangjunnz]

Thanks

[@andyli]

:)

[@jxkz7]

Am i too late to start 😊?

[@aftabkhan2677]

Hi Andy, I am 19 just starting into web3. I am no previous experience in coding I am noob in coding, should I learn java script first or solidity ? In the article you mentioned in the road map of web3 security. its tolded to learn java first.

[@andyli]

I would say Solidity first, go through the 32 hour solidity tutorial on youtube

[@aftabkhan2677]

Thank you will do that.

[@devabdee]

TY. Sir

[@andyli]

👍

[@serousetrick]

Any advice on what can be profitable but still less competitive area of web3, like what smart contract auditing was a year or two ago?

[@andyli]

No easy profits now since we are in a crypto bear market. Learning to become a dev/auditor in web3 is still going to pay off long term.

[@tomj1883]

yea I feel this too but I will definitely continue participating in code4rena because Im there to learn, not the money :) Thanks for the great content!

[@andyli]

yep 100%, money is just a bonus

[@HelloWorld-sy4yc]

Ohh, u get it. It's cuz of your videos, dude...

[@andyli]

It can't *all* be because of my videos lol

[@zerocool2765]

Should I start my journey in web 3 bug bounty or traditional bug bounty?

[@andyli]

web3 has bigger long term upside I think

[@digitalchinmay263]

Hey do you know any other platforms other than code4rena, like one that accepts gas opt etc. ? I'm asking about permissionless open platforms.

[@andyli]

I don't know of any others that accepts QA and gas ops.

[@digitalchinmay263]

@@andyli And other audit platforms ? Like code4rena and immunefi ?

[@devone7702]

I'm a proframmer, who is starting his journey in traditional bug bounty. Do you think it's better to learn web3 bug bounty instead ?

[@andyli]

try some CTFs and see if you enjoy web3

[@farena.human_]

Is it right time to learn web3 security? I mean now days

[@andyli]

Yep, good time

[@farena.human_]

@@andyli thanks

[@emmanuelochubili]

@Andy please what are the requirements .. if i am a begginer in bug bounty

[@andyli]

Start with doing Ethernaut CTF, I made a video on beginner road map

[@emmanuelochubili]

@@andyli thanks man.. will look for the link

[@eugenionull9758]

same feeling here... it's over

[@andyli]

Sad 😥

[@ashhadali7592]

So i start it or not whats ur advise? i already do web 2 bug bounties intrested to learn web 3 your advise save mu time

[@andyli]

Depends on if you are doing this full time and how much you are currently earning in web2 bounties.
It is still possible to make $500-$1000 per month doing this part time, and of course the long term upside is huge

[@ashhadali7592]

@@andyli no part time
In web 2 mar earning is 1000-2000$
2) part time 1000$ is good so u mean i start it
Thank you Very much
u help me alot

[@goodboy9758]

psyops

[@andyli]

🤯

[@bluelantern5241]

Bro youve got to stop making that "suck" noise. Have you ever gone back and listened. Holy cow

[@fuffsec]

Great content. Thank you so much

[@andyli]

🙌

[@haanrey]

Don't take advice from everyone. I had found a $$$$$ bug in one of the oldest programs in bugcrowd . The bug was 5 years old .

[@andyli]

damn, congrats

[@haanrey]

@@andyli coming here after a year , I am sorry for being rude while commenting . I wish you more success .

[@priyanshujaswal2210]

​@@haanreyAt least you learnt brother. And doing this after a few months shows that you are a good person 😊