I never put money on stuff I’m actively investigating for bugs. I think it can cloud your judgement as you might start hoping not to find anything.

Never thought of getting any BTC before I had spent months studying the code, and gave up ever finding vulnerabilities there.

Many researchers take the opposite approach and focus on stuff the are invested in, as protecting their own stash can be a motivation.

I think that’s a bad idea.

Spent weeks studying the Stacks code base.

I wouldn’t put any money in there.

Tbf that’s not different from most projects I study — I hunt and report bugs for a living so I tend to focus on things that I think have issues or are broken.

On the other hand there’s basically no money in hunting bugs in most Bitcoin projects — yet there are few hacks or serious vulnerabilities. I spent a long time on the Bitcoin Core code base and a some early LN code few years ago and I’m still betting on these.

Should create a NIP to change name of this thing to Zostr

Zaps and other stuff

Notes are other stuff now