-Practical security vs theoretical security

-Lessons from a seasoned web3 security firm

@EthSecurity1

Threshold Encrypted Mempools: Limitations and Considerations.
https://arxiv.org/abs/2307.10878

Crypto bridges sins exposed. Exploiting weak spots of multi-chain protocols by deliriusz.
@Ethsecurity1

-solc Internals Part 3: Quirks & Optimizations.

-Fuzzing on-chain contracts with Echidna.

-A Comprehensive Guide to Arbitrum and its Security Features.

@EthSecurity1

-How to Write Better Smart Contracts By Checking Them With Slither.

-The Blockchain Guardians: Safeguarding the Future of Ethereum Smart Contract Security.
@EthSecurity1

I feels everybody in auditing needs know web3 Architectur. here is some courses please feedback me if these courses beneficial for you.

1. Course I: DeFi Infrastructure:
https://youtube.com/playlist?list=PLE1Vu6ctbqa61FqJmPDnoPzDqrnyILHRm
2. Course II: DeFi Primitives:
https://youtube.com/playlist?list=PLE1Vu6ctbqa5kIXZCCpkAJxkI66dXzy61
3. Course III: DeFi Deep Dive:
https://youtube.com/playlist?list=PLE1Vu6ctbqa7Df5YJgMtH1xCcy0yX_dri
4. Course IV: DeFi Risks and Opportunities:
https://youtube.com/playlist?list=PLE1Vu6ctbqa7eZK2gychKr1RGZ3t1qf8S

@EthSecurity1

Chainlink Oracle DeFi Attacks
https://medium.com/cyfrin/chainlink-oracle-defi-attacks-93b6cb6541bf
@Ethsecurity1

A Leap in DeFi UX: The Surge of Telegram Trading Bots 🤖

[ Rise of The Machines ]

In the crypto landscape, user experience (UX) often takes a back seat to developer experience. However, a UX shift in DeFi is unfolding right before our eyes. The game-changer? and the rise of Telegram trading bots.

Trading bots aren't a new concept and are relatively simple to understand and implement - they automate trades based on predefined rules. What really sets the recent wave of trading bots apart is their integration into a convenient and familiar chat interface: the Telegram app.

[ Simplicity Wins ]

These bots simplify the trading process, making DeFi more accessible to the average user. No more navigating complex exchange dashboards or deciphering trading charts. Now, it’s as simple as sending a text message.

These bots also offer real-time updates and alerts, keeping users informed about market changes and potential trading opportunities. It's like having a personal trading assistant, always on call.

But it's not just about convenience. These bots also open up new possibilities for strategy and automation. Users can set their own rules, customize their trading strategies, and let the bot do the work.

This shift in UX is a testament to the innovative spirit of crypto. Making DeFi more user-friendly, more accessible, and ultimately, more democratic is a net positive for the space.

[ Closing Thoughts ]

In hindsight, it might seem obvious that the rise of Telegram trading bots marked a new chapter in the DeFi/crypto UX story: A future where transactions are seamlessly integrated into our day-to-day lives.

As with any innovation, there are risks. Always do your own research.
📍 Web2 security engineers incoming to web3 industry
@ethsecurity1

-MEV-Share CTF Writeups

-Gas optimization resources

-blockchain security and AML report

-Whitehacks Kit - A simple template to perform whitehacks safely in a single tx, leveraging Foundry and Flashbots.

@EthSecurity1

guys please Do not undestimate resources that I shared here. many of them is enough to turn you in professional or start you desire career.

Web3 Security Talks Frequent Content Creators

samczsun videos
• Reentrancy patterns Video
DeFi MOOC channel
• Practical Smart Contract Security with samczsun Video
• DeFi risks and attacks with Arthur Gervais Video
Patrick Ventuzelo videos
• Smart contract reverse engineering Video
• Fuzzing with Echidna Video
• Auditing with mythril Video
Mudit Gupta videos
• Livestream #1 Video
• Livestream #2 Video
yAcademy channel
• Formal Verification Video
• Audit Like You Mean It Video
OpenZeppelin channel
• Introduction to backrunning
• OpenZeppelin Secure Development Series
Immunefi channel
• Live bug hunt video
Spearbit channel

Other Lists
Crytic's awesome ethereum security

@Ethsecurity1

Yul & Memory Intro | Yul Exploit!
https://www.youtube.com/watch?v=9qLUvtL5uKQ


The Dark Arts of Yul | Solidity Fridays

https://www.youtube.com/watch?v=ew3pfnb2_V8

@EthSecurity1

How To Learn Fast
https://degatchi.com/articles/how-to-learn-fast
@EthSecurity1

Solidity Interview Questions

https://www.rareskills.io/post/solidity-interview-questions

Unmasking the Phantom: The Intricate Shadow Transactions Attack Deciphered

Ciaofficer auditors advice in 3 parts

blog.pessimistic.io/auditors-advice-math-solidity-gas-optimizations-part-1-3-a99c478d2ebb

@ethsecurity1

That is one of High level course about ZK Audit i have seen it. Feedback me if it is useful

https://www.youtube.com/playlist?list=PLeUIc0UZxuuF8_ueHNt1TuEyNhcsmzu_g
@ethsecurity1

Protocol Diagramming

• ethereum-graph-debugger - A graphical EVM debugger. Displays the entire program control flow graph.
• Slither - Slither can map method visibility and modifiers, state variables that are read and written, calls, and can print the inheritance graph of a smart contract
• Solgraph - Generates DOT graphs with function control flow of a solidity contract
• Surya - Generates various visual outputs of function call graphs
• sol-function-profiler - Solidity contract function


Jonatas
Write-up

Auditor’s Advice: EVM Limitations & Assembly Auditing Tips | Part 3/3.


@ethsecurity1

The Vulnerable Nature of Decentralized Governance in DeFi.

The Double-Edged Sword of abi.decode

@EthSecurity1

+ 1 👀

• twitter.com/ylv_io/status/1693706540413276247

#security