I was( and still ) a desktop / mobile vuln researcher before and trying to switch to web3 and blockchain auditing