Ethereum Smart Contracts Visualisation Tools: Surya, Solgraph, Slither, Piet, Sol2UML and Sol Function Profiler🔥🔥🔥

@ethers_officer

https://dreamlab.net/en/blog/post/ethereum-smart-contracts-visualisation-tools-surya-solgraph-slither-piet-sol2uml-and-sol-functi/

📢 Security Pills #37 💊

- Reusable properties for Ethereum contracts
- Demystifying Exploitable Bugs in Smart Contracts
- An introduction to zero-knowledge machine learning (ZKLM)
- Smart Contract Obfuscation Techniques and more!

and more!

https://newsletter.securitypills.news/p/security-pills-issue-37

Give it a try🔥🔥🔥

"vEVM is an on-chain gasless arbitrary bytecode execution engine. It's fast. It's free. It's live on testnet right now"


@ethers_officer

https://vevm-demo.vercel.app

#CODE #ANALYSIS

CTF🔥🔥🔥
https://mrstealyocrypto.xyz/

Post-mortems
https://twitter.com/0xToshii/status/1625530895901032448?t=HJYdkCPJUv-03SqmVza72A&s=19

@ethers_officer

📢 Security Pills #38 💊

- Overview of the Inflation Attack
- EVM Part I: The ABCs of Ethereum Virtual Machine
- Understanding the Impact of Airdrops on NFT Marketplace Performance
- How your NFTs Could Have Been Stolen in Just One Click
- Algorand Thefts - Preliminary Advisory Report

and more!

https://newsletter.securitypills.news/p/security-pills-issue-38

New stuff 🔥🔥🔥

@ethers_officer
https://soliditydeveloper.com/prevrandao

Why not Aave3?)

@ethers_officer
https://www.youtube.com/watch?v=l5RKksbi8e8&t=1535s

Paradigm Data Portal 🔥🔥🔥 Check it out

It includes 3 public datasets derived from Ethereum's history
1. contracts 📜: all contracts ever created, w/ bytecode+metadata
2. ETH transfers 💸: all ETH transfers ever, in similar format to ERC20 Transfers
3. slots 🎰: all contract slots, w/ usage metadata

in the future you can expect
- more types of datasets
- the same datasets, but for more chains
- updates to the datasets as more blocks get added
- integration of these datasets into tools such as ctc

**a cli tool called pdp can be used to download and manage these datasets

https://data.paradigm.xyz/

@ethers_officer

https://fxtwitter.com/notnotstorm/status/1636768359810498561?t=qQe5qfD37r4kl4TBxl0TaA&s=35

Latest Week in Ethereum News; Withdrawals are coming to mainnet on April 12

https://weekinethereumnews.com/week-in-ethereum-news-march-18-2023

📢 Security Pills #39 💊

- Polynonce: A tale of a novel ECDSA attack and bitcoin tears
- EVM Part II: The Journey of Smart Contracts from Solidity code to Bytecode
- Why you should probably never sort your Merkle tree's leaves
- Bitcoin address clustering based on multiple heuristic conditions
- Smart Contract Auditing Heuristics

and more!

https://newsletter.securitypills.news/p/security-pills-issue-39

Check it out🔥🔥🔥

A Step-by-step guide to using the Diamond Standard (EIP-2535) to Create and Upgrade an NFT (Mar 2023)

Upgradable Functionality with EIP2535: A Comparative Analysis

@ethers_officer

Compared 20 smart contract risk scores between ChatGPT and a manual security review. ChatGPT produced the same result as the manual review 12 times. However, of the 8 misses, 5 of them were cases where ChatGPT incorrectly labeled a high risk asset as low risk, which is the worst case failure: underestimating a risk score is far more detrimental than overestimating.
https://www.coinbase.com/blog/token-security-with-chatgpt

Reentrancy Guard at the proxy level to prevent any type of reentrancy (even view reentrancy).
https://medium.com/spherex-technologies/reentrancy-guard-2-0-cbbc0be41634

📢 Security Pills #40 💊

- Hack Analysis: BonqDAO
- Five Myths about Formally Verifying Smart Contracts
- Understanding Block TimeStamp Manipulation
- Encrypted Mempools
- Top 10 Hacking Techniques of 2022
- BitGo Wallet Zero Proof Vulnerability
- Security Vulnerabilities in popular Web3 Transaction Simulation solutions

and more!

https://newsletter.securitypills.news/p/security-pills-issue-40