Spellcast

A Solidity smart contract auditor that doesn’t know how the EVM works makes for a weak auditor. Here are 3 resources to get up to speed ↓ Pro-tip: Start high-level and then go deeper

Looking forward to this

Looking for new Ethereum items to learn? Here are some ideas: • Latest Ethereum EIPs: EIP-6541, EIP-6963 • New Ethereum opcodes: CREATE ABL - Always Be Learning

Secret weapon Web3 devs have over Web2 devs: Open source codebases This means that whenever a Web3 dev is building a project, they can find an open source codebase to either fork or get inspiration from. Web2 devs do not have this luxury, so don’t squander it as a Web3 dev.

Ever wondered how SushiSwap works? Here’s a deep-dive analysis of the algorithm: medium.com/coinmonks/analysi…

Check out the top 20 security best practices Here 👉 blog.web3sec.news/posts/top-…

Base Layer 2 launched by Coinbase has overtaken Optimism in daily active users Definitely keep an eye on it 👀 But most importantly, be aware of scams and rugpulls We’ve been seeing a lot of those

Web2 engineers looking to get into Web3 engineering must first understand the architectural differences This figure shows the difference between centralized architecture (Web2) and decentralized architecture (Web3)

The crazy thing is that if a security auditor does not understand your protocol Their recommendations can actually introduce new bugs into the codebase This is why you must do your research on the auditors and consider getting multiple audits Always opt for more eyes on code👀

Be careful with the Twitter X rebrand Social media scams have been growing in popularity. These days, hackers are exploiting the Twitter rebrand, using fake emails and too-good-to-be-true deals to lure projects into clicking their phishing links. Keep your social medias safe

Bookmark this

Solidity engineers and auditors alike Remember, upgrading smart contracts can introduce new bugs, potentially putting millions at risk. Check out Diffusc A differential fuzzer created by Trail of Bits, that compares two smart contracts to uncover any unexpected changes.

ERC-6551 Familiarize yourself with this new standard It’s an interface and registry for smart contract accounts owned by NFTs. Many projects are adopting it as it allows NFTs to own assets + interact with apps, without requiring changes to the existing smart contracts.

Ever wonder how NFTs are stored on Ethereum? Here’s a technical deep dive that covers how it happens levelup.gitconnected.com/tec…

Many technical folks are still getting into the Web3 space Even in a crypto bear market 💪 Here’s a solid Web3 study list put together by @s3rgiomazari3go: sergiomazariego.notion.site/…

Post audit security This is becoming more and more important as the number of hacks on audited projects increases. How can you protect your smart contracts after launch? Make sure to set up a bug bounty program and look into Forta for automated network monitoring.