ByteCaesar @ByteCaesar

Bugs Delenda 'Est Joined March 2024

Tweets

147
Followers

30
Following

261
Likes

567

ByteCaesar @ByteCaesar

4 months ago

Bookmark this tweet , if you are a beginner in web3 security then its mandatory to know how ethereum and bitcoin work under the hood. ethereum yellow paper course : youtube.com/watch?v=e84V1M… bitcoin white paper course : youtube.com/watch?v=MCxOwP… #Web3Community #Web3Security

0 0 1 23 1

0xFrankCastle🦀 @0xcastle_chain

6 months ago

Check out this article—it provides a great explanation of Raydium’s constant product market maker (CPMM) and OpenBook. These are two of the most important DeFi applications on @solana 🦀: extremelysunnyyk.medium.com/solana-amm-und…

3 20 114 7K 120

Mohsin Khan @tabaahi_

6 months ago

Procrastinate often? Work 10 hours a day for just one week you’ll start loving the grind more than the delay. Why procrastinate when you can wake up proud every day?

5 9 132 5K 25

0xSimao @0xSimao

6 months ago

1/ Bookmark this. One of the most important lessons in security research: Spotting the root cause is not enough. You must also understand the intent and impact. Let me walk you through a TWAP bug example that could’ve been easily misunderstood. 🧵

13 31 242 11K 328

0xFrankCastle🦀 @0xcastle_chain

6 months ago

I'm going to explain this important topic in this thread to make sure everyone can benefit from this guide. All the security checks done by Anchor are handled through constraints, which inject the common operations at runtime. You can read the docs here: docs.rs/anchor-lang/la…

0xCharlesDCheerful @carlos__alegre

6 months ago

5 1 40 10K 24

2 14 89 6K 96

0xCharlesDCheerful @carlos__alegre

6 months ago

Sensei @0xcastle_chain , master of Solana 🙏, may I ask you this in public so we all can benefit. Is there any checklist anywhere of safety-checks/procedures that Anchor handles for you? Like resetting account data to 0 when closing an account etc

5 1 40 10K 24

dravee.eth @BowTiedDravee

6 months ago

Ever been so obsessed with some ideas that you had to write them down to see what's produced? Well, that's my latest insight-baby. It's a bit long, but i believe it should be quite good! I hope it'll help you find more bugs (and write good specs!), anon! justdravee.github.io/posts/the-3-pr…

17 29 202 19K 243

0xFrankCastle🦀 @0xcastle_chain

6 months ago

I just realized that @osec_io has 115 public Solana security reports.🫡 I believe that one of the best ways to learn security is by reading past reports and learning from them. Here is a valuable resource—don’t let it die in your bookmarks:😄 ottersec.notion.site/Sampled-Public…

2 29 204 11K 280

RareSkills @RareSkills_io

6 months ago

Early on in your auditing journey? We created a new learning resource: Buggy ERC-20s Buggy ERC-20s is a repo of 20 (yes that is intentional) ERC-20 contract implementations, but with a bug. As much as possible, we tried to make these bugs reflect the kind of mistakes…

5 36 183 17K 151

Download Image

chrisdior.eth @chrisdior777

7 months ago

Lots to learn from this one, worth the read! Enjoy.✌️

CD Security @CDSecurity_

7 months ago

Lots to learn from this one, worth the read! Enjoy.✌️

0 5 18 2K 17

Download Image

0 1 7 738 5

Zaevlad | Solidity, Audit & LLM @RightNowIn

7 months ago

If you write a lot of tests in Foundry, you'll find this plugin very useful! It helps to read console logs in a more comfortable way. Especially if a function has a lot of calls in it Thanks to @eth_fullstack for developing it! Link to try out the plugin below ⬇️

7 17 99 6K 113

Download Image

Georgios Konstantopoulos @gakonst

8 months ago

ANNOUNCING: FOUNDRY v1.0! Every major DeFi protocol and smart contract developer who wants secure and gas-efficient code uses Foundry. Today, Foundry is officially stable, and here for the long run. Congratulations to everyone on today's huge milestone. `foundryup`! A lot of…

171 422 2K 227K 295

Download Image

InfectedCrypto @InfectedCrypto

8 months ago

Whenever I need a refresher on a topic, I search for @MixBytes and usually find exactly what I'm looking for. Today, for instance, I was researching yield aggregators: mixbytes.io/blog/yield-agg… boom

0 4 39 1K 32

pashov @pashovkrum

8 months ago

All kinds of attack vectors listed here as missing input validation, unsafe casts, price manipulations, weak RNG, unset initialization flags and more Another year another great auditor's rewind blogposts, long but a must-read 🫡 hubs.li/Q035bKpS0

1 35 216 9K 224

nisedo @nisedo_

8 months ago

Wdyt?

nisedo @nisedo_

8 months ago

Wdyt? https://t.co/nYIVRmSp1Z

13 15 195 61K 86

Download Image

28 8 206 21K 87

Download Image

Hunter @0xHuntoor

8 months ago

A 5 minutes read alpha: You came across a code that utilises a specific EIP, you don't know about it Go into: eip.directory Search about that EIP: Make sure to actually understand the EIP and go to other referred EIPs when needed Understood it?, good. Now go to…

7 8 71 3K 59

Download Image

cmichel @cmichelio

8 months ago

Whenever I find a bug, I look back and ask: How could I have found that faster? I go back, figure out which steps of thought were necessary, and retrain myself to perform only those steps in 30 seconds. Fooming Shoggoths - Thought That Faster open.spotify.com/track/4zhgRs1n…

4 20 246 9K 134

Owen | Guardian @0xOwenThurm

8 months ago

Our most in-depth report to date 🤯

Guardian @GuardianAudits

8 months ago

Our most in-depth report to date 🤯

1 3 14 4K 9

5 8 42 3K 5

InfectedCrypto @InfectedCrypto

8 months ago

If you've been thinking about trying Solana auditing but aren't sure where to start, my quick-start guide has you covered: - A quick 10-mn read - Packed with valuable resources to guide you further - Focuses on the absolute basics to give you a clear idea infect3d.xyz/blog/solana-qu…

1 8 37 2K 31

Download Image

Daniel Von Fange @danielvf

8 months ago

The single most important advice for a new bug bounty hunter was dropped by infosec_us_team in the Immunefi discord: "Rewire your brain so that instead of hunting for 'bugs' or 'mistakes', you hunt for a specific 'impact'..." Your income will go way up because... 🧵 1/5