Search | arXiv e-print repository
BlockChain
Audit Hero
Web3Suggest
To help you Understand Topics, you can visit these sections and learn the skills mentioned easily. There is enough content to help you get started, Learn most of that skill, and get hired.
SunWeb3Sec/DeFiVulnLabs: To learn common smart contract vulnerabilities using Foundry!
DiligentDeer
Research | Analysis | Insights | Opinions
Incentives Supply & Demand.
Curve LP Oracle Manipulation: Post Mortem
What if you could manipulate Curve's oracles to exploit major DeFi protocols? Read about the technical details of read-only reentrency attacks.
Decoding $220K Read-only Reentrancy Exploit| QuillAudits
Summary:On the 24th of October 2022, Market.xyz (lending market on QuickSwap DEX) was exploited with a price manipulation attack.
AmazingAng/WTF-Solidity: 我最近在重新学solidity,巩固一下细节,也写一个“WTF Solidity极简入门”,供小白们使用,每周更新1-3讲。官网: https://wtf.academy
我最近在重新学solidity,巩固一下细节,也写一个“WTF Solidity极简入门”,供小白们使用,每周更新1-3讲。官网: https://wtf.academy - AmazingAng/WTF-Solidity: 我最近在重新学solidity,巩固一下细节,也写一个“WTF Solidity极简入门”,供小白们使用,每周更新1-3讲。官网: https://wtf.academy
DeFi Hacks Analysis - Root Cause
defi-by-example/read-only-reentrancy at main · stakewithus/defi-by-example
Contribute to stakewithus/defi-by-example development by creating an account on GitHub.
DevCon 6 - Security Track
Share your videos with friends, family, and the world
The Dangers of Surprising Code
The only thing worse than a bug in your code that breaks everything is a bug in your code that subtly breaks one thing
Read-only Reentrency - a Novel Vulnerability Class Responsible for $100m+ Funds at Risk
Replaying Ethereum Hacks - Rari Fuse VUSD Price Manipulation | cmichel
A few days ago, pool 23 of Rari’s Fuse platform was exploited.
In this episode of the Replaying Ethereum Hacks series, we will look at what…
High Risk Bug Disclosure: Across Bridge Double-Spend | iosiro
A high risk vulnerability was disclosed to Risk Labs by iosiro affecting the Across bridge relayer infrastructure and awarded with a $90,000 bounty.
Introduction
Uniswap V3 Development Book # Welcome to the world of decentralized finances and automated market makers! This book will be your guide in this mysterious and amusing world! Together, we’ll build one of the most interesting and important applications, which serves as a pillar of today’s decentralized finances–Uniswap V3!
This book will guide you through the development of a decentralized application, including:
smart-contract development (in Solidity); contracts testing and deployment (using Forge and Anvil from Foundry); design and mathematics of a decentralized exchange; development of a front-end application for the exchange (React and MetaMask).
My Smart Contract Audit Process (Part 1)
How to Become a Smart Contract Auditor: https://jacksonkelley.gumroad.com/l/how-to-become-a-smart-contract-auditor/process-one-ytIn this video, I do the firs...
Maximal extractable value (MEV) | ethereum.org
An introduction to maximal extractable value (MEV)
pcaversaccio/reentrancy-attacks: A chronological and (hopefully) complete list of reentrancy attacks to date.
A chronological and (hopefully) complete list of reentrancy attacks to date. - pcaversaccio/reentrancy-attacks: A chronological and (hopefully) complete list of reentrancy attacks to date.
Smart Contract Security / Solidity Security & how to change the bytecode of a deployed contract
Slides: https://drive.google.com/file/d/1-wzuY4U4OKFQ2Mc4ctmwKh2g3fAl4_85/view?usp=sharingFurther to the section on Front Running, I have created a post on E...
Smart Contract Security _ Solidity Security.pdf
The forgotten IPFS vulnerabilities | ConsenSys Diligence
In 2021 we privately disclosed multiple vulnerabilities in the InterPlanetary File System but never really talked about it. Let’s change that 😊!
Uniswap v3 TWAP Oracle Tooling and Deep Dive Pt. 1
Chaos Labs, a cloud security platform for DeFi applications, has released open source tooling for developing with Uniswap v3 TWAP Oracles.
Perma-brick UUPS proxies with this one trick (devs hate this!) | iosiro
iosiro disclosed a UUPS proxy vulnerability to several teams, affecting over $50m in assets. This post details the technical details and the disclosure to OpenZeppelin.
Discover the World's Top Smart Contract Auditing Companies | SmartContractAudits
Browse distinguished companies providing smart contract auditing services and find contact information, previous reports, client testimonials and more.
crytic/building-secure-contracts: Guidelines and training material to write secure smart contracts
Guidelines and training material to write secure smart contracts - GitHub - crytic/building-secure-contracts: Guidelines and training material to write secure smart contracts
Introduction
function renderKatex(element) { renderMathInElement(document.body, { delimiters: [ { left: '$$', right: '$$', display: true }, { left: '$', right: '$', display: false }, { left: '\\(', right: '\\)', display: false }, { left: '\\[', right: '\\]', display: true } ], throwOnError: false }); } \[ \] You’ll find the complete code of this chapter in this Github branch.
First Swap # In this milestone, we’ll build a pool contract that can receive liquidity from users and make swaps within a price range.
HashingBits | QuillAudits | Substack
Stay current with latest DeFi/NFT events, hacks & innovations from around the globe. Don't fall behind! Click to read HashingBits, by QuillAudits, a Substack publication with hundreds of readers.
DEX Arbitrage, Mathematical Optimisations & Me
How to efficiently maximise arbitrage profit over a set of exchanges via Convex Optimisation
Learn Solidity (0.5) - Merkle Tree
Learn about Merkle tree and merkle proof using Solidity.
Code: https://solidity-by-example.org/app/merkle-tree
Remix IDE: http://remix.ethereum.org
Solidity: https://solidity.readthedocs.io
Follow on Twitter: @ProgrammerSmart https://twitter.com/ProgrammerSmart
Website: https://smartcontractprogrammer.com