Explains how vulnerability researchers approach smart-contract audits and how to question the metrics used to sell audit competitions.
Why read Luna Tong (cts)?
Luna's auditing guide helps an experienced programmer transfer vulnerability-research skills to smart contracts. Its categories separate language pitfalls, business logic, interactions with other protocols and code-quality issues. Start there, then read the report-writing section and follow the exercises. The guide assumes existing research experience; its claims about careers and the market belong to its 2022 context.
Her audit-competition essay gives a different reader a practical set of questions: are reported findings unique and valid, who actually participated, and did two audits cover the same code and scope? These distinctions help you read a sales deck alongside the underlying reports. Luna leads Zellic, whose acquisition of Code4rena is disclosed in the essay, so the comparison comes from an audit provider and competition operator.
Start with the original
Selected work
-
Guide ·
The Auditooor Grindset
Start with the four types of contract problems and the report-writing section. A route for experienced vulnerability researchers into Solidity and DeFi, with historical career and market commentary.
Cite this selection
XFollowList, “The Auditooor Grindset” reading notes in the Luna Tong (cts) profile. https://xfollowlist.com/people/luna-tong#work-4daa1dd0393d
The linked work is the original source; this permalink identifies XFollowList’s reason to read it. Original work published .
Profile-source checking date and references · Dated reading map
-
Analysis ·
Choosing an Audit Competition: How to Spot Snake Oil
Read the questions about unique findings, valid participants and matching audit scope. The opening discloses Zellic's acquisition of Code4rena, giving context for the author's commercial perspective.
Cite this selection
XFollowList, “Choosing an Audit Competition: How to Spot Snake Oil” reading notes in the Luna Tong (cts) profile. https://xfollowlist.com/people/luna-tong#work-4793dd99dc85
The linked work is the original source; this permalink identifies XFollowList’s reason to read it. Original work published .
Profile-source checking date and references · Dated reading map
Projects & roles
Zellic
Its official team page identifies Luna as co-founder and CEO of the security research and audit firm.
Code4rena acquisition
Her August 2024 announcement explains Zellic's acquisition of the audit-competition platform.
Community rating
Sources & further reading
Profile sources checked . This describes checking these references, separately from the publication dates of selected works.
- Her public profile uses cts, describes Zellic co-foundership and directly links gf_256.
- The current company page gives the Luna Tong name and leadership role.
- The Luna Tong byline and the closing reference to co-founder cts connect the writing to the public pseudonym.
Cite this profile’s source check
XFollowList, Luna Tong (cts) profile sources. Sources checked 2026-10-11. https://xfollowlist.com/people/luna-tong#sources-checked