dethera (@dethera777) header
dethera (@dethera777) profile picture

Smart Contract Developer/Security Researcher | Crypto Advocate | Senior Software Engineer | C++ / Rust | 🇧🇬

Bulgaria
Joined April 2023
Photo by dethera (@dethera777)Photo by dethera (@dethera777)Photo by dethera (@dethera777)Photo by dethera (@dethera777)
If Bitcoin breaks $67,000 within 24 hours of this tweet, I will give 1 random follower who like and retweet this ONE whole #Bitcoin.
3,929
13,749
507
25,455
1,930,658
If Bitcoin breaks $50k by end of 2023 I will give $5,000 BTC to 50 people. Just like, retweet and make sure you are following me. Pls send it
1,002
2,944
42
3,815
184,227
To become an effective Smart Contract Security researcher you should try to acquire these 5 habits: - Continuous Learning: Stay updated with the latest developments in blockchain technology and smart contract languages. Never stop learning. - Maintain a Security-Oriented Mindset: Always think from the perspective of a potential attacker to anticipate vulnerabilities. - Collaborative Mindset: Engage with the community and collaborate with other researchers. - Problem Solving: Cultivate the ability to solve complex problems - Critical Thinking: Cultivate the ability to think critically
1
2
21
2,091
This tweet serves as a complete Web3 Security Mini-course Here's everything you need to know.👇 External Call Attacks (Reentrancy, DoS, Gas Griefing, Return Values) youtube.com/watch?v=VF1HYD50… Advanced Reentrancy Guide youtube.com/watch?v=3T1t2gin… Frontrunning youtube.com/watch?v=dlEIfGT2… Sandwich Attacks youtube.com/watch?v=6y3nwJS4… Intro to AMMs youtube.com/watch?v=QvyMkRtj… Uniswap V3 Deep Dive youtube.com/watch?v=Ltph_X60… Oracle Manipulation youtube.com/watch?v=tbGqaDHZ… ERC20 Edge Cases youtube.com/watch?v=Tx0f8A2Y… DAO & Governance Attacks youtube.com/watch?v=O4fLWPKQ… 21 Critical Bugs & Vulnerabilities youtube.com/watch?v=8fNNVQv4… 3 Important Findings youtube.com/watch?v=ekFN7GtG… Rounding Errors youtube.com/watch?v=6rmLP-ri… Understand Ethereum Cryptography youtube.com/watch?v=9ZKY8DoV… Signature Manipulation Attacks youtube.com/watch?v=V3TJLDHZ… Master Upgradeability Patterns youtube.com/watch?v=e5lWvt1r… Learn The EVM youtube.com/watch?v=Ru3inmu1… Master Calldata youtube.com/watch?v=WkyyT0pm…
4
50
3
238
26,518
.@KyberSwap was exploited due to tick manipulation and double liquidity counting. In summary, the attackers borrowed a flash loan and drained the pools with low liquidity. By executing swaps and altering positions, they manipulated the current prices and ticks of the victimized pools. Ultimately, the attacker triggered multiple swap steps and cross tick operations, resulting in double liquidity counting and consequently draining the pools.
Kyber being exploited on all chains rn. here's an example tx on base. 20m+ lost already
12
99
22
408
216,272
dethera retweeted
This might be the most underrated content in all of Web3 💎 @tinchoabbate, one of the very top researchers out there breaks down step by step from a technical perspective one of the most brilliant hacks we've ever seen: @TornadoCash 🌪️ And it's only got 52 views 😲 youtube.com/watch?v=UFDoDELW…
6
25
146
17,385
If you could ever only watch one video for Security Research, this is probably it
4
36
298
24,609
It's easy to work hard when everything goes your way. But what about when things start to get tough and you feel like you aren't going anywhere? - Well, those are the times when you have to show what you are truly made out of. Remember this, no matter where you are right now.
5
5
38
3,421
Little knowledge and high effort can land you in the top 10% of any contest. Low effort and some more knowledge will land you in the top 50% (if you're lucky). In the short term, effort is the best leverage you have.
1
7
50
4,820
When reviewing DeFi protocols claiming to support all ERC20 tokens, it's important to dig deeper. Using SafeERC20 simply does not cut it! Here's a non-exhaustive list of questions that you, as a security researcher should be asking, when reviewing such protocols 👇
1
8
27
2,544
dethera retweeted
I started hobby of studying Solidity Oct 2022, first contests in March 2023. First few contests were brutal, all my "findings" were rejected. But I persevered, learned a ton more, pulled a 28K bug bounty, started getting valid contest findings & rest is history Don't give up!
3
14
335
ℹ️Small tip: The nonReentrant modifier should occur before all other modifiers This is a best-practice to protect against reentrancy in other modifiers.
3
8
481
I made Read-only Reentrancy as simple as possible! No longer does this exploit need to be mysterious nor complex. Read on(ly) to understand exactly what Read-only Reentrancy is and how you can spot it in your next audit.👇🧵
13
44
2
167
26,743
Reading code line by line is not enough for a top smart contract audit You need to be able to see the big picture of the project and how it works
5
3
38
2,359