EthSecurity

So apparently some signers of the WBTC multisig lost their keys. That's more than just slightly concerning IMHO... https://github.com/WrappedBTC/DAO/pull/12

GitHub

Migrate WBTC big DAO multisig to a new one with safer active signers by tranvictor · Pull Request #12 · WrappedBTC/DAO

Issue
The current big DAO multisig (0xd409db68d0e6e97e1cb1f3eb0bd38de278bc3c68) has 18 signers and requires 11 to form a consensus and process a transaction. Now that nearly 4 years have passed, se...

67 views11:50

EthSecurity

https://github.com/x676f64/SmartContracts-audit-checklist

GitHub

GitHub - x676f64/SmartContracts-audit-checklist: A checklist of things to look for when auditing Solidity smart contracts.

A checklist of things to look for when auditing Solidity smart contracts. - GitHub - x676f64/SmartContracts-audit-checklist: A checklist of things to look for when auditing Solidity smart contracts.

👍1

67 views11:14

EthSecurity

https://github.com/cryptofinlabs/audit-checklist

GitHub

GitHub - cryptofinlabs/audit-checklist: A Solidity smart contract auditing checklist

A Solidity smart contract auditing checklist. Contribute to cryptofinlabs/audit-checklist development by creating an account on GitHub.

77 views11:15

EthSecurity

I would like to quickly highlight that Polygon has still an enforced minimum 30 gwei priority fee - i.e. if you send a transaction with e.g. the default 1.5 gwei priority fee you are essentially screwed because the tx is underpriced.

wen fix? https://github.com/maticnetwork/bor/blob/develop/builder/files/config.toml#L56

GitHub

bor/config.toml at develop · maticnetwork/bor

Official repository for the Matic Blockchain. Contribute to maticnetwork/bor development by creating an account on GitHub.

90 viewsedited 08:07

EthSecurity

https://docs.google.com/spreadsheets/d/1YRfIhcckhdNi9xSaCpCIDc2VV5HkprLlnp7lbTh5Txk/edit#gid=464771811

114 views11:30

EthSecurity

I present you the source code for
TornadoCash
Nova's frontend, enjoy. https://t.co/ekoMUWAaPF

tornadocash

nova-ui

User interface for Tornado Cash Nova.

109 views11:31

EthSecurity

https://soliditydeveloper.com/merkle-tree

Soliditydeveloper

The Ultimate Merkle Tree Guide in Solidity

Merkle trees are used everywhere in the world of blockchains. Learn how they work, how to use them yourself and what might be future optimizations for them.

128 views19:54

EthSecurity

https://annas-archive.org/

120 views09:36

EthSecurity

some very interesting stats:
- A total of 2,058,022 existing selfdestructable contracts were created by creators with only CREATE2 in their bytecode.
- A total of 2070 contracts deployed at previously-reinited addresses. 2065 are selfdestructable!
https://hackmd.io/X-waAY49SrW9i36SKOVuGQ

hackmd.io

Selfdestruct Removal Analysis 3 - HackMD

142 views07:37

EthSecurity

https://tokenflow.live/blog/ethereumdecoded-lesson-1

Token Flow Insights

#EthereumDecoded lesson 1 - storage diff decoding with Token Flow

Using Token Flow's Ethereum Data Warehouse, we explain what storage is in the Ethereum Virtual Machine (EVM), and how to get it in a more human readable form.

👍1

87 views05:59

EthSecurity

https://vxtwitter.com/0xasp_/status/1606714516884303872?t=qYlLGUB59nI_9LKWZQtK9A&s=19

vxTwitter

0:04

PraneshASP (@0xasp_)

Now you can easily view the storage layout of your @solidity_lang contract(s) with the latest (v0.0.3) release of VSCode Solidity Inspector extension!

GitHub repo: https://github.com/PraneshASP/vscode-solidity-…

💖 259

90 views18:32

EthSecurity

My frens wrote a book about security in defi recently

https://www.amazon.ca/Understanding-Cybersecurity-Management-Decentralized-Finance/dp/3031233395/ref=sr_1_1?keywords=Understanding+Cybersecurity+Management+in+Decentralized+Finance&qid=1672026139&sr=8-1

977 viewsedited 05:33

EthSecurity

https://twitter.com/dedaub/status/1610058814094450694

121 views17:11

EthSecurity

Nft mint exploit explained
https://twitter.com/0x_Beans/status/1610715897068662785

83 viewsedited 15:43

EthSecurity

Phalcon 2.0 is gem

https://phalcon.blocksec.com/

BlockSec

Dive into Transaction to Act Wisely - BlockSec Phalcon Explorer

Phalcon Explorer helps developers, traders, and researchers understand complicated transactions to make better decisions. It supports ETH, BNB Chain, Arbitrum, Polygon, and more.

91 viewsedited 16:30

EthSecurity

https://twitter.com/Beosin_com/status/1610993684287488001

Twitter

🚀We just released the Global Web3 Security Report 2022🚨This report is co-produced by @Beosin_com @BuidlerDAO @LegalDAO_CN & @Footprint_Data 💪

📍Read the text version⏬
https://t.co/hOhV5PO2b9
📍Download the full report in PDF⏬
https://t.co/5PhD3g9vVq

95 views18:24

EthSecurity

https://bowtiedisland.com/the-best-smart-contract-auditors-ranked/

BowTied Island

The Best Smart Contract Auditors: Ranked

Updated April, 2022 - Smart contract audits are a critical part of crypto security. Diligent audits from a quality firm help catch bugs and issues, as

103 views18:53

EthSecurity

• A Tool for Detecting Metamorphic Smart Contracts https://t.co/Plag0lSNML

• Ethereum Smart contract auditor roadmap https://t.co/5HGeWrLrpd https://t.co/oJWAoiXBpW
Protecting smart contracts against reverse engineering

https://t.co/yRdikSZ91D

In this paper, Authors propose an automated #security enhancement tool for protecting smart contracts against reverse engineering

Free cybersecurity courses:

Ethical Hacking 12 Hours https://t.co/qjeI2JhkW2

OSINT in 5 Hours https://t.co/6hUKlWrH3F

Beginner Web Application Hacking https://t.co/upRxZiLYBA

Linux for Ethical Hackers https://t.co/h9fMoMTOKv

Buffer Overflows Made Easy
https://t.co/U8l6bEWXnf

a16z crypto

Meet the Mighty Morphin’ Smart Contract Detector

I built a tool to help detect and defend against "metamorphic smart contracts," mutable blockchain code that poses a risk to web3 users.

🔥3👍1

104 views07:24

EthSecurity

Viper tips
https://twitter.com/0xcassini/status/1612107365817679872

86 views18:02

EthSecurity