Chainlink Oracle DeFi Attacks
https://medium.com/cyfrin/chainlink-oracle-defi-attacks-93b6cb6541bf
@Ethsecurity1

A Leap in DeFi UX: The Surge of Telegram Trading Bots 🤖

[ Rise of The Machines ]

In the crypto landscape, user experience (UX) often takes a back seat to developer experience. However, a UX shift in DeFi is unfolding right before our eyes. The game-changer? and the rise of Telegram trading bots.

Trading bots aren't a new concept and are relatively simple to understand and implement - they automate trades based on predefined rules. What really sets the recent wave of trading bots apart is their integration into a convenient and familiar chat interface: the Telegram app.

[ Simplicity Wins ]

These bots simplify the trading process, making DeFi more accessible to the average user. No more navigating complex exchange dashboards or deciphering trading charts. Now, it’s as simple as sending a text message.

These bots also offer real-time updates and alerts, keeping users informed about market changes and potential trading opportunities. It's like having a personal trading assistant, always on call.

But it's not just about convenience. These bots also open up new possibilities for strategy and automation. Users can set their own rules, customize their trading strategies, and let the bot do the work.

This shift in UX is a testament to the innovative spirit of crypto. Making DeFi more user-friendly, more accessible, and ultimately, more democratic is a net positive for the space.

[ Closing Thoughts ]

In hindsight, it might seem obvious that the rise of Telegram trading bots marked a new chapter in the DeFi/crypto UX story: A future where transactions are seamlessly integrated into our day-to-day lives.

As with any innovation, there are risks. Always do your own research.
📍 Web2 security engineers incoming to web3 industry
@ethsecurity1

-MEV-Share CTF Writeups

-Gas optimization resources

-blockchain security and AML report

-Whitehacks Kit - A simple template to perform whitehacks safely in a single tx, leveraging Foundry and Flashbots.

@EthSecurity1

guys please Do not undestimate resources that I shared here. many of them is enough to turn you in professional or start you desire career.

Web3 Security Talks Frequent Content Creators

samczsun videos
• Reentrancy patterns Video
DeFi MOOC channel
• Practical Smart Contract Security with samczsun Video
• DeFi risks and attacks with Arthur Gervais Video
Patrick Ventuzelo videos
• Smart contract reverse engineering Video
• Fuzzing with Echidna Video
• Auditing with mythril Video
Mudit Gupta videos
• Livestream #1 Video
• Livestream #2 Video
yAcademy channel
• Formal Verification Video
• Audit Like You Mean It Video
OpenZeppelin channel
• Introduction to backrunning
• OpenZeppelin Secure Development Series
Immunefi channel
• Live bug hunt video
Spearbit channel

Other Lists
Crytic's awesome ethereum security

@Ethsecurity1

Yul & Memory Intro | Yul Exploit!
https://www.youtube.com/watch?v=9qLUvtL5uKQ


The Dark Arts of Yul | Solidity Fridays

https://www.youtube.com/watch?v=ew3pfnb2_V8

@EthSecurity1

How To Learn Fast
https://degatchi.com/articles/how-to-learn-fast
@EthSecurity1

Solidity Interview Questions

https://www.rareskills.io/post/solidity-interview-questions

Unmasking the Phantom: The Intricate Shadow Transactions Attack Deciphered

Ciaofficer auditors advice in 3 parts

blog.pessimistic.io/auditors-advice-math-solidity-gas-optimizations-part-1-3-a99c478d2ebb

@ethsecurity1

That is one of High level course about ZK Audit i have seen it. Feedback me if it is useful

https://www.youtube.com/playlist?list=PLeUIc0UZxuuF8_ueHNt1TuEyNhcsmzu_g
@ethsecurity1

Protocol Diagramming

• ethereum-graph-debugger - A graphical EVM debugger. Displays the entire program control flow graph.
• Slither - Slither can map method visibility and modifiers, state variables that are read and written, calls, and can print the inheritance graph of a smart contract
• Solgraph - Generates DOT graphs with function control flow of a solidity contract
• Surya - Generates various visual outputs of function call graphs
• sol-function-profiler - Solidity contract function


Jonatas
Write-up

Auditor’s Advice: EVM Limitations & Assembly Auditing Tips | Part 3/3.


@ethsecurity1

The Vulnerable Nature of Decentralized Governance in DeFi.

The Double-Edged Sword of abi.decode

@EthSecurity1

+ 1 👀

• twitter.com/ylv_io/status/1693706540413276247

#security

solidity Decompilers
https://github.com/eveem-org/panoramix — another decompiler
ethervm.io — online decompiler
ABI for unverified contracts
https://github.com/Jon-Becker/heimdall-rs — also includes a decompiler Solidity data representation https://ethdebug.github.io/solidity-data-representation/ Working in Web3: The Handbook https://web3.smsunarto.com/ solidity style Guide https://www.rareskills.io/post/solidity-style-guide /
@ethsecurity1

Officercia new post

https://blog.pessimistic.io/auditors-notes-initializing-proxy-oracles-multi-chain-e314ec0694b2

Curve Finance Analysis and Post-mortem

Theft of collateral tokens with fewer than 18 decimals

@EthSecurity1

https://kebabsec.xyz/posts/critical_vulnerability_in_uniswapx/ @EthSecurity1

ZKP vulnerabilities

Zcash hash collision

https://www.youtube.com/watch?v=W4zAbEnJQUw

Frozen heart

https://www.youtube.com/watch?v=ffPI0B2l2dY

@EthSecurity1

Time to shit on some proxy patterns.

- Beacon: it sucks in performance, antipattern that got psyoped into relevance.

- UUPS: devs need to pollute their implementations.

- Transparent: devs need to deploy 2 extra contracts and verify them everytime. Much captcha.@EthSecurity1

X users manipulated by ChatGPT bots to visit malicious crypto sites.

Dark days incoming

Lazarus Group exploits ManageEngine vulnerability to deploy QuiteRAT


DeFi Hacks Analysis - Root Cause Analysis Part 2 SunSec

@EthSecyrity1