dethera retweeted
If Bitcoin breaks $67,000 within 24 hours of this tweet, I will give 1 random follower who like and retweet this ONE whole #Bitcoin.
dethera retweeted
If Bitcoin breaks $50k by end of 2023
I will give $5,000 BTC to 50 people.
Just like, retweet and make sure you
are following me. Pls send it
dethera retweeted
To become an effective Smart Contract Security researcher you should try to acquire these 5 habits:
- Continuous Learning: Stay updated with the latest developments in blockchain technology and smart contract languages. Never stop learning.
- Maintain a Security-Oriented Mindset: Always think from the perspective of a potential attacker to anticipate vulnerabilities.
- Collaborative Mindset: Engage with the community and collaborate with other researchers.
- Problem Solving: Cultivate the ability to solve complex problems
- Critical Thinking: Cultivate the ability to think critically
dethera retweeted
This tweet serves as a complete Web3 Security Mini-course
Here's everything you need to know.👇
External Call Attacks
(Reentrancy, DoS, Gas Griefing, Return Values)
youtube.com/watch?v=VF1HYD50…
Advanced Reentrancy Guide
youtube.com/watch?v=3T1t2gin…
Frontrunning
youtube.com/watch?v=dlEIfGT2…
Sandwich Attacks
youtube.com/watch?v=6y3nwJS4…
Intro to AMMs
youtube.com/watch?v=QvyMkRtj…
Uniswap V3 Deep Dive
youtube.com/watch?v=Ltph_X60…
Oracle Manipulation
youtube.com/watch?v=tbGqaDHZ…
ERC20 Edge Cases
youtube.com/watch?v=Tx0f8A2Y…
DAO & Governance Attacks
youtube.com/watch?v=O4fLWPKQ…
21 Critical Bugs & Vulnerabilities
youtube.com/watch?v=8fNNVQv4…
3 Important Findings
youtube.com/watch?v=ekFN7GtG…
Rounding Errors
youtube.com/watch?v=6rmLP-ri…
Understand Ethereum Cryptography
youtube.com/watch?v=9ZKY8DoV…
Signature Manipulation Attacks
youtube.com/watch?v=V3TJLDHZ…
Master Upgradeability Patterns
youtube.com/watch?v=e5lWvt1r…
Learn The EVM
youtube.com/watch?v=Ru3inmu1…
Master Calldata
youtube.com/watch?v=WkyyT0pm…
dethera retweeted
.@KyberSwap was exploited due to tick manipulation and double liquidity counting.
In summary, the attackers borrowed a flash loan and drained the pools with low liquidity. By executing swaps and altering positions, they manipulated the current prices and ticks of the victimized pools. Ultimately, the attacker triggered multiple swap steps and cross tick operations, resulting in double liquidity counting and consequently draining the pools.
dethera retweeted
This might be the most underrated content in all of Web3 💎
@tinchoabbate, one of the very top researchers out there breaks down step by step from a technical perspective one of the most brilliant hacks we've ever seen: @TornadoCash 🌪️
And it's only got 52 views 😲
youtube.com/watch?v=UFDoDELW…
dethera retweeted
It's easy to work hard when everything goes your way.
But what about when things start to get tough and you feel like you aren't going anywhere? - Well, those are the times when you have to show what you are truly made out of.
Remember this, no matter where you are right now.
dethera retweeted
Little knowledge and high effort can land you in the top 10% of any contest.
Low effort and some more knowledge will land you in the top 50% (if you're lucky).
In the short term, effort is the best leverage you have.
dethera retweeted
When reviewing DeFi protocols claiming to support all ERC20 tokens, it's important to dig deeper.
Using SafeERC20 simply does not cut it!
Here's a non-exhaustive list of questions that you, as a security researcher should be asking, when reviewing such protocols 👇
dethera retweeted
Replying to @LazioAlex96049 @PatrickAlphaC @carlitox477 @code4rena @cyfrin @giovannidisiena @CodeHawks
I started hobby of studying Solidity Oct 2022, first contests in March 2023. First few contests were brutal, all my "findings" were rejected.
But I persevered, learned a ton more, pulled a 28K bug bounty, started getting valid contest findings & rest is history
Don't give up!
dethera retweeted
Replying to @GotransferM @ShieldifyMartin @ShieldifyAnon @0xVolodya @noah_eth @gkrastenov @0xSorryNotSorry @mylifechangefa1 @ShieldifyGhost @zuhaib44 @devScrooge
41. @KKat7531
42. @spellcastwtf
43. @yttriumzz
44. @Meckerrr
45. @shunduquar
46. @windowhan
47. @SakshamGuruji
48. @ikbkln
49. @CholakovAudits
50. @Oliver_Secure
51. @WhitehatDiary
52. @VictoryG0D
53. @SolauOfficial
54. @White_Oak_Kong
55. @dethera777
56. @yixxas
57. @CodeSentry
58. @RedTigerAuditor
59. @GochevSvetoslav
60. @deadrosesxyz
dethera retweeted
ℹ️Small tip: The nonReentrant modifier should occur before all other modifiers
This is a best-practice to protect against reentrancy in other modifiers.
dethera retweeted
I made Read-only Reentrancy as simple as possible!
No longer does this exploit need to be mysterious nor complex.
Read on(ly) to understand exactly what Read-only Reentrancy is and how you can spot it in your next audit.👇🧵



















