samczsun
Security researcher and Security Alliance founder
Exploit analysis and security strategy that connect smart-contract flaws with infrastructure, people and incident response.
Why read samczsun?
samczsun's price-oracle guide shows how a protocol can turn an apparently ordinary market price into an exploitable assumption. He walks through mechanisms and incident examples, making it useful for understanding what a contract trusts and how an attacker can influence that input. It is a concrete starting point for readers moving from using DeFi to examining how it works.
His later writing broadens the problem beyond a contract's source code. The North Korean threat article examines infrastructure and human access, while the bounty essay asks how to keep deployed systems under active review. These pieces connect exploit research to the work of Security Alliance, which he founded after his research role at Paradigm.
Selected work
-
So you want to use a price oracle
When can a quoted market price become an attack vector? His incident examples explain how protocols consume prices and what happens when attackers can manipulate the source they trust.
Cite this selection
XFollowList, “So you want to use a price oracle” reading notes in the samczsun profile. https://xfollowlist.com/people/samczsun#work-189ca99be3b8
The linked work is the original source; this permalink identifies XFollowList’s reason to read it. Original work published .
Profile-source checking date and references · Dated reading map
-
Demystifying the North Korean Threat
How does a security investigation extend beyond smart contracts? His account connects incident response with infrastructure, recruiting and access controls, showing how the threat model changes as evidence arrives.
Cite this selection
XFollowList, “Demystifying the North Korean Threat” reading notes in the samczsun profile. https://xfollowlist.com/people/samczsun#work-ba15b459d325
The linked work is the original source; this permalink identifies XFollowList’s reason to read it. Original work published .
Profile-source checking date and references · Dated reading map
-
Higher Bug Bounties Won't Stop Hacks
How do you keep a deployed system under review? His argument distinguishes a passive bounty offer from commissioning a new audit, including changes in dependencies and the resources needed for each approach.
Cite this selection
XFollowList, “Higher Bug Bounties Won't Stop Hacks” reading notes in the samczsun profile. https://xfollowlist.com/people/samczsun#work-8abdca4e8d7c
The linked work is the original source; this permalink identifies XFollowList’s reason to read it. Original work published .
Profile-source checking date and references · Dated reading map
Projects & roles
Security Alliance
The nonprofit he founded, with incident-response, intelligence and security-preparation initiatives.
samczsun's research
His archive of exploit research, technical explanations and security essays.
Sources & further reading
Profile sources checked . This describes checking these references, separately from the publication dates of selected works.
- His current introduction identifies Security Alliance and describes Paradigm as a previous research role.Link to this source note
- The organization's current account of its security initiatives.Link to this source note
Cite this profile’s source check
XFollowList, samczsun profile sources. Sources checked 2026-10-09. https://xfollowlist.com/people/samczsun#sources-checked