𐌋𐌄Ꝋ @CipherShade

Something big is brewing. Eyes on #cantinapectra. 🕶️🖤

Cantina 🪐 @cantinaxyz

7 months ago

Something big is brewing. Eyes on #cantinapectra. 🕶️🖤

56 156 407 719K 58

Download Video

Level up your cybersecurity knowledge! A compilation of the best Web3 security alpha from our top engineers 🧵 📚 Blog Posts 1️⃣ Preparing for the Challenges of Smart Contract Audits 🔗 zokyo.io/blog/navigatin… Compilation of essential tips for pre-audit preparation 2️⃣ The…

Ether Transfers in Solidity: transfer(), send(), and call() In Solidity, there are three primary ways to transfer Ether between contracts or to external accounts: transfer(), send(), and call(). Each method has different behaviors, including safety mechanisms and gas…

keyboard_arrow_left Previous keyboard_arrow_right Next

Spot this bug, and you might become a Sherlock Lead Senior Watson (LSW) one day. The winner will be picked in 24 hours. This code is a simplified version of an actual vulnerability found in a Sherlock contest. Hint: Look closely at the disableMaxLock function, consider all…

Uninitialized Storage Pointers/ Uninitialized State Bugs Explained In Solidity, data storage is categorized into three main types: storage, memory, and calldata, each serving distinct purposes within smart contracts. Storage variables are part of the contract's persistent state…

Inheritance in Smart Contracts This concept, borrowed from object-oriented programming, enables code reusability and modular design. By inheriting from a parent contract, a child contract can access and utilize its state variables, functions, and modifiers. Solidity supports…

No delegatecall: Preventing unwanted delegatecalls When delegatecall is used in a contract, it executes code in the context of another contract. This means the code runs in the context of the calling contract (using its storage, balance, and address), but the actual code to…

keyboard_arrow_left Previous keyboard_arrow_right Next

One great method that can improve your learning is a feedback form 📝. It helped me WIN my first @code4rena contest back in November 🏆 And it helped me get a chance to work with @GuardianAudits, auditing some of the biggest names in crypto 💼. This isn't a technique to do…

keyboard_arrow_left Previous keyboard_arrow_right Next

Solana PDAs : Here Is How It Works - Part - 1 Let's explore a main use case for Program Derived Accounts (PDAs). It allows a program to have control over a given account, and pseudo-sign transactions to modify it. We first create a pool, derived from the creator's address, and…

keyboard_arrow_left Previous keyboard_arrow_right Next

Understanding Low-Level Call & High-Level Call in Solidity In Solidity, there are two primary ways to invoke functions or interact with other contracts: high-level and low-level calls. These two methods offer different levels of abstraction and control over the interaction…

keyboard_arrow_left Previous keyboard_arrow_right Next

Insecure randomness Explained Generating random numbers has found various applications in the Web3 space. For example, a gaming, gambling/bet DApp finds this useful in determining pool winners. However, doing this can create an in-way for attacks. Insecure randomness refers to…

keyboard_arrow_left Previous keyboard_arrow_right Next

~2 years ago I got into web3 security, ~6 months later I went all-in on it - best decision ever. Ever since I jumped in that rabbit hole, it's been 24/7/365 non-stop researching, auditing, organising reviews. If I was starting today from scratch I'd 100% do it all over again.

How Call Functions Work in Solidity The “call” function in Solidity is a low-level function that enables contract-to-contract communication by invoking functions or sending Ether to a specified contract address. It operates by taking calldata and executing it on the intended…

keyboard_arrow_left Previous keyboard_arrow_right Next

Come become an auditor and forget all of this bullshit forever

jtriley2p @jtriley2p

a year ago

Come become an auditor and forget all of this bullshit forever

46 40 448 161K 131

Algebra's Reserve Logic - A Competitive Advantage Did you know that @CryptoAlgebra developed a unique reserve logic, which allows them to redistribute tokens which are transferred directly to the pair / rebase tokens, as a fee to the liquidity providers in the current active…

How to detect Honeypot Tokens as non-technical user Detecting honeypot tokens as a non-technical user can be challenging, but with a few steps, you can significantly reduce your risk when considering investing in new tokens on blockchain platforms. Here’s a practical approach…

keyboard_arrow_left Previous keyboard_arrow_right Next

How can @Tether_to freeze USDT? USDT is the biggest stablecoin with a circulating supply of over 110 billion USD. Centralized stablecoins always come with the same risk: Centralized control Tether's ability to freeze USDT revolves around the inclusion of administrative…

keyboard_arrow_left Previous keyboard_arrow_right Next

How ERC777's hook receiver feature could be used as an attack vector: - The attack vector in short - ERC777 and its hooks - The attack vector with arbitrary calls mixbytes.io/blog/one-more-…

UniswapV2: _mintFee explained Within the UniswapV2Pair, the _mintFee function seems to be one of the slightly more complicated concepts. Today, I will dissect this mechanism. The _mintFee function is particularly notable for its role in managing lp fees within the protocol.…

UniswapV2 Router Flaw: Double Taxation The UniswapV2 router exposes two distinct functions for removing liquidity with transfer-tax token pairs: a) removeLiquidity b) removeLiquidityETHSupportingFeeOnTransferTokens The Standard Liquidity Removal: removeLiquidity The…

keyboard_arrow_left Previous keyboard_arrow_right Next