91ºÚÁÏ

In the fast-paced world of blockchain security, few names stand out like Enami. A cybersecurity engineer with a deep passion for Web3, Enami has made a significant impact in the field, securing decentralized systems and uncovering vulnerabilities. Last month, he took the spotlight as Auditor of the Month. We sat down with him to learn more about his journey, approach to auditing, and what keeps him motivated.

From Curiosity to Cybersecurity: Enami’s Journey

Q: Enami, you’ve had an impressive month! Can you tell us a bit about yourself? How did you get into auditing and Web3?

Enami: My name is Amine, but most people know me as Enami—it's a nickname that stuck. I’m a cybersecurity engineer with a passion for blockchain technology. My journey into Web3 security started about four years ago as a hobby. It all began when I dove into cryptocurrency and became fascinated with how it worked under the hood. That curiosity led me naturally to auditing and securing decentralized systems. It wasn’t something I had always planned to do, but once I started, I knew I had found my calling.

Q: Outside of auditing, what are your passions or hobbies? How do you unwind after a long day?

Enami: Beyond auditing, I’m really into cybersecurity challenges like Capture The Flag (CTF) competitions and penetration testing. These keep my skills sharp and my mind engaged. I also enjoy exploring Identity and Access Management (IAM) technologies—there’s something satisfying about understanding how systems authenticate and protect data. But after a long day, I like to switch gears: I’ll put on some music, relax, and either play snooker—where I’d say I’m pretty good—or sit down for a game of poker with friends. These moments help me recharge and clear my head.

The Art of Auditing: Process & Challenges

Q: You completed an impressive audit for Leverage X on AuditOne and found 20 issues. What has been the most challenging project you’ve worked on, and how did you overcome it?

Enami: While the Leverage X audit was definitely a highlight, some of my toughest projects have been audits involving languages I was encountering for the first time, like GoLang and Rust. Learning a new syntax while trying to deliver high-quality results was challenging. What made it even harder was when the project’s code wasn’t well-structured—auditing messy code slows down vulnerability detection. I overcame this by quickly studying the language basics and relying on my core auditing principles. Staying focused despite the complexity is key in this field.

Q: Can you walk us through your process when you first start an audit?

Enami: My first step is always to thoroughly understand the codebase. I go line by line, documenting the flow of every function—how data moves, where decisions are made, and what the logic is trying to achieve. Without that foundation, auditing is like navigating a maze blindfolded. Once I’ve mapped it out, I start looking for weak points—areas where assumptions might fail, inputs aren’t validated, or logic could be exploited. Building that mental model first allows me to systematically identify vulnerabilities.

Q: Is there a specific type of smart contract bug that you love finding?

Enami: Honestly, common vulnerabilities like reentrancy or overflow issues don’t excite me much—those are table stakes. What really gets me going is uncovering new bugs tied to a project’s unique logic flow. These require creativity and deep thinking to detect. When I catch one, it’s incredibly satisfying because it means I’ve truly understood the system on a different level.

Q: With the rise of new blockchain projects, how do you stay updated on the latest technologies and threats?

Enami: Staying updated comes naturally because I’m constantly working on new Web3 projects, and each one teaches me something fresh. Beyond that, I actively read articles, research papers, and community posts—especially on platforms like X (formerly Twitter), where people share cutting-edge insights. A mix of hands-on experience and keeping my ear to the ground helps me stay ahead.

Q: What’s the most important skill for someone looking to become a top-tier auditor like yourself?

Enami: Technical skills are crucial, but the real edge comes from strong analytical reflexes and patience. Auditing isn’t just about knowing tools or languages—it’s about instinctively spotting where things might go wrong and having the discipline to dig deep, even when it’s tedious. You can teach someone the tech, but that mindset is what separates the best auditors from the rest.

Staying Sharp & Motivated

Q: What keeps you going during tough or long audit projects?

Enami: It’s definitely the thrill of the chase. Finding a tricky vulnerability is like solving a puzzle—it’s a rush when it all clicks. But beyond that, I’m driven by the bigger picture: knowing that my work helps secure systems people rely on. That sense of impact keeps me pushing through, even when the hours get long or the code gets messy.

Q: Auditing requires intense focus. Do you have any routines or rituals to stay sharp?

Enami: Absolutely. Before starting a big audit, I clear my workspace, grab a coffee, and put on some low-key instrumental music—no lyrics, just beats to keep me in the zone. I also take short breaks to stretch or stare out the window for a minute; it helps reset my focus. I’ve learned that pacing myself is key—if I push too hard without breaks, I start missing things.

Q: Where do you see yourself in the next few years? Any big goals or dreams?

Enami: I’m aiming high—I want to start my own company focused on cybersecurity and blockchain security. The goal is to build a team that’s just as passionate as I am and take on bigger, more complex projects. I’d love to create something that not only secures the Web3 space but also pushes the industry forward with new tools and approaches. That’s the dream, and I’m working toward it step by step.

Q: If you weren’t an auditor, what would you be doing?

Enami: I’d still be deep in cybersecurity, likely focusing more on my work as a cybersecurity engineer or IAM consultant. Honestly, I wear a few hats already, so I’d just shift the balance a bit. Blockchain auditing is a big part of what I do, but I’d be just as happy breaking into systems as a pentester or designing secure identity solutions—anything that keeps me solving tough problems!

Thanks, Enami!

From his meticulous approach to auditing to his passion for cybersecurity, Enami embodies what it means to be a top-tier auditor. His ability to adapt, stay motivated, and push the boundaries of Web3 security makes him a standout in the field. We can’t wait to see what he achieves next! Stay tuned for more insights from top auditors in the industry, and congratulations again to Enami for being our Auditor of the Month!