Introduction — EVM from Scratch
Security
EVM Opcodes & Solidity Gas Mastery Tutorial | Cyfrin Updraft Assembly & Formal Verification Excerpt
This is an excerpt from the upcoming Assembly, Opcodes, and Formal Verification course. We go over the following in this video:
- How to write a smart contract in Opcodes (with Huff!)
- How to disassemble a smart contract
- How to read the bytecode of a smart contact (without it even being verified on Etherscan!)
- How to write Yul/Inline assembly in Solidity
- How to truly become a gas optimization professional using low-level programming languages
- How the Opcodes in the EVM work
GitHub repo associated with this video: https://github.com/Cyfrin/1-horse-store-s23
GitHub Repo for the coming course: https://github.com/Cyfrin/assembly-evm-opcodes-and-formal-verification-course
Security Course on Updraft: https://updraft.cyfrin.io/courses/security
Register for Cyfrin Updraft: https://updraft.cyfrin.io/
⏰ Timestamps ⏰
0:00:00 | Introduction
0:02:57 | Horse Store - Huff & Opcodes
2:07:39 | Breaking down solidity compiled opcodes
3:24:47 | Yul
3:48:40 | HorseStoreV2 - Huff
4:28:30 | Gas Comparisons & Summary
😸😸Follow Patrick!😸😸
Cyfrin: https://www.cyfrin.io/
YouTube: https://www.youtube.com/@PatrickAlphaC/videos
Twitter: https://twitter.com/patrickalphac
Medium: https://medium.com/@patrickalphac
TikTok: https://www.tiktok.com/@patrickalphac
🛡️ More Cyfrin
CodeHawks: https://codehawks.com/
Solodit: https://solodit.xyz/
Updraft: https://updraft.cyfrin.io/
All thoughts and opinions are my own.
Exchange Rate Manipulation in ERC4626 Vaults - Euler Finance
PRice Manipulation , Shares manipulation, Initial supply
🪄 Using this Book - Polkadot Blockchain Academy
The materials used in the Polkadot Blockchain Academy
audits/solo/README.md at master · pashov/audits
Contribute to pashov/audits development by creating an account on GitHub.
Dimitar Tsvetanov on Twitter / X
You can read about common attack vectors in AMM protocols in this article. There is also a Checklist at the end to look at when auditing👇🏼https://t.co/GUov1MwIGI— Dimitar Tsvetanov (@cvetanovv0) January 3, 2024
Fave on X: "Are you competing in @code4rena @CreditGuild audit contest. Here are some cool resources to look into https://t.co/oSHUFhespb https://t.co/zEqFfJhLEW https://t.co/EJfWVouCRu https://t.co/tuXCI0YVmi" / X
What is liquidation, compound finance etc.
Owen | Guardian Audits 🛡️ on X
GMX v2 testcases
portfolio/content/bridges/BridgeSecurityChecklist.md at master · spearbit/portfolio
Bridge Security Checklist
Blockchain Oracles for Connected Smart Contracts | Chainlink Documentation
Chainlink staleness for L2 chains
Understanding Compound’s Liquidation - Zengo
Understanding Compound’s Liquidation Zengo is the first keyless bitcoin and cryptocurrency wallet — the most simple and secure way to manage your crypto assets.
web3 audit dump
A new tool for teams & individuals that blends everyday work apps into one.
Introduction - Aave Unleashed
Chinmay Farkya on X
I plan to become a legendary auditor in the next 6 months
I have been feeling this drive to kick things up and direct effort properly, mainly because of goals shifting every month
To achieve peak performance, more than speed you need the right direction
This is what I'm going…
@bytes032.xyz on X
Liquidation Checklist
0xPARC/zk-bug-tracker: A community-maintained collection of bugs, vulnerabilities, and exploits in apps using ZK crypto.
zksync bug database
ERC20 Weirdness & Attacks Part 1
ERC20 Checklist
d-xo/weird-erc20: weird erc20 tokens
Different erc20 bugs
pashov on X
Proxy Checklist
Typical vulnerabilities in AMM protocols
This article discusses the fundamental security aspects of the AMM (automatic market maker) protocols.
Oracles, Entropy & Chainlink VRF Secure Integration Tips
In this article, we present tips that we have acquired over the years of auditing similar integrations. We also intend to discuss the…
VRF
audits/solo/NFTLoots-security-review.md at master · pashov/audits
polygon reorg, whenever a contract is on polygon and uses VRF make sure that the block time is set to something bigger
Tal – Medium
Read writing from Tal on Medium. researcher @ smlXL. Every day, Tal and thousands of other voices read, write, and share important stories on Medium.
How To Effectively Learn Smart-Contract Auditing
https://twitter.com/DevDacianHow to cultivate a growth mindset, overcome fears, and adopt winning strategies for successful audits. Explore a range of audit ...
Vyper Nonreentrancy Lock Vulnerability Technical Post-Mortem Report - HackMD
On the 30th of July, 2023, multiple Curve.Fi liquidity pools were exploited as a result of a latent vulnerability in the Vyper compiler, specifically in versions 0.2.15, 0.2.16, and 0.3.0. While bug was identified and patched by the v0.3.1 release, the impact to protocols using the vulnerable compilers was not realized at the time and they were not explicitly notified. The vulnerability itself was an improperly implemented re-entrancy guard that could be bypassed under certain conditions which we will delve into in this report.
Chainlink VRF Secure Integration Tips: Specifications
Chainlink VRF Intergrations
Dedaub on Twitter
“Watchdog analyses operate on the actual bytecode of contracts (via decompilation as seen here)
As a result, compiler bugs can also be caught by these analyses
Yesterday's @CurveFinance hack could have been prevented had a cross-reentrancy analysis on this codebase been run”
🎤 Demystifying EVM Opcodes
Join Gilbert G of Macro for a talk titled, "Demystifying EVM Opcodes." This workshop is part of ETHNewYork 2022, a three-day in person hackathon that will fe...
coinspect/learn-evm-attacks: Learn & Contribute on previously exploited vulnerabilities across several EVM projects.
Learn & Contribute on previously exploited vulnerabilities across several EVM projects. - coinspect/learn-evm-attacks: Learn & Contribute on previously exploited vulnerabilities acr...
Automated brain process for smart contract auditing
Notes for auditing