degensec.eth @degensec

Joined April 2021

Tweets

229
Followers

173
Following

385
Likes

858

degensec.eth @degensec

2 years ago

Solidity 0.8.22 will ship with an optimization rule for simple loop increments. I can't believe it took so long to do this. No more ugly unchecked blocks.

1 0 0 366 1

Download Image

degensec.eth @degensec

2 years ago

Like all high-leverage endeavors, Web3 security follows the pareto principle. The hustle is to get to the top 20%. After that scale happens by itself.

pashov @pashovkrum

2 years ago

Like all high-leverage endeavors, Web3 security follows the pareto principle. The hustle is to get to the top 20%. After that scale happens by itself.

23 10 181 21K 25

0 0 1 289 0

degensec.eth @degensec

2 years ago

Managed to get an easy $500 Medium on the @centrifuge audit on @code4rena. Always check if the protocol implements an ERC to spec, especially if it’s an obscure standard (ERC1404 in this case)

0 0 28 2K 6

Download Image

.@NoahMarconi made a remark on the @ScrapingBits podcast about the current lack of auditor tooling. I think it really holds back the space. What sort of auditing tool would you be excited about using? What feature do you dream about having in the tools you already use? Curious.

3 0 8 673 3

nader dabit @dabit3

2 years ago

My controversial programming opinion is that 99% of what everyone argues about on here literally doesn’t even matter when it comes to shipping actual software Everyone is stumbling, reaching, larping, will say almost anything if they’ve calculated it will bring them attention

41 57 707 75K 19

Antonio Viggiano @agfviggiano

2 years ago

This week I shared my experience with invariant testing at @opensensepw Here are my tips and best practices on to write robust and efficient property tests for your DeFi protocol 🧵

6 18 83 9K 78

Download Image

degensec.eth @degensec

2 years ago

Biggest takeaway from the vyper bug: Never assume an external module is secure. OpenZeppelin Contracts are industry-standard but they are not immune to bugs. 18 known vulnerabilities in v4. More will come with v5. Best ROI in security comes from challenging assumptions.

1 2 37 3K 4

Download Image

degensec.eth @degensec

2 years ago

The vyper compiler 0-day is already the worst language bug ever in crypto in terms of aggregate money lost. Currently a massive arms race is happening between whitehats and blackhats, looking for exploits in the wild. Reach out to @pcaversacci if you think a project might be…

sudo rm -rf --no-preserve-root / @pcaversaccio

2 years ago

22 113 372 179K 21

0 1 4 1K 0

Vyper @vyperlang

2 years ago

PSA: Vyper versions 0.2.15, 0.2.16 and 0.3.0 are vulnerable to malfunctioning reentrancy locks. The investigation is ongoing but any project relying on these versions should immediately reach out to us.