dethera retweeted
If Bitcoin breaks $67,000 within 24 hours of this tweet, I will give 1 random follower who like and retweet this ONE whole #Bitcoin.
dethera retweeted
If Bitcoin breaks $50k by end of 2023
I will give $5,000 BTC to 50 people.
Just like, retweet and make sure you
are following me. Pls send it
dethera retweeted
To become an effective Smart Contract Security researcher you should try to acquire these 5 habits:
- Continuous Learning: Stay updated with the latest developments in blockchain technology and smart contract languages. Never stop learning.
- Maintain a Security-Oriented Mindset: Always think from the perspective of a potential attacker to anticipate vulnerabilities.
- Collaborative Mindset: Engage with the community and collaborate with other researchers.
- Problem Solving: Cultivate the ability to solve complex problems
- Critical Thinking: Cultivate the ability to think critically
dethera retweeted
This tweet serves as a complete Web3 Security Mini-course
Here's everything you need to know.👇
External Call Attacks
(Reentrancy, DoS, Gas Griefing, Return Values)
youtube.com/watch?v=VF1HYD50…
Advanced Reentrancy Guide
youtube.com/watch?v=3T1t2gin…
Frontrunning
youtube.com/watch?v=dlEIfGT2…
Sandwich Attacks
youtube.com/watch?v=6y3nwJS4…
Intro to AMMs
youtube.com/watch?v=QvyMkRtj…
Uniswap V3 Deep Dive
youtube.com/watch?v=Ltph_X60…
Oracle Manipulation
youtube.com/watch?v=tbGqaDHZ…
ERC20 Edge Cases
youtube.com/watch?v=Tx0f8A2Y…
DAO & Governance Attacks
youtube.com/watch?v=O4fLWPKQ…
21 Critical Bugs & Vulnerabilities
youtube.com/watch?v=8fNNVQv4…
3 Important Findings
youtube.com/watch?v=ekFN7GtG…
Rounding Errors
youtube.com/watch?v=6rmLP-ri…
Understand Ethereum Cryptography
youtube.com/watch?v=9ZKY8DoV…
Signature Manipulation Attacks
youtube.com/watch?v=V3TJLDHZ…
Master Upgradeability Patterns
youtube.com/watch?v=e5lWvt1r…
Learn The EVM
youtube.com/watch?v=Ru3inmu1…
Master Calldata
youtube.com/watch?v=WkyyT0pm…
dethera retweeted
.@KyberSwap was exploited due to tick manipulation and double liquidity counting.
In summary, the attackers borrowed a flash loan and drained the pools with low liquidity. By executing swaps and altering positions, they manipulated the current prices and ticks of the victimized pools. Ultimately, the attacker triggered multiple swap steps and cross tick operations, resulting in double liquidity counting and consequently draining the pools.
Got another lil one from @code4rena Venus contest. Pumped for the upcoming ones 🫡
Got a reward from the Dopex competition on @code4rena. The reward may be small, but it is a huge motivation boost to go on✌️
dethera retweeted
This might be the most underrated content in all of Web3 💎
@tinchoabbate, one of the very top researchers out there breaks down step by step from a technical perspective one of the most brilliant hacks we've ever seen: @TornadoCash 🌪️
And it's only got 52 views 😲
youtube.com/watch?v=UFDoDELW…
Wow, 11 hours of auditing alpha from @0xOwenThurm! I am a couple of hours in and loving the content. Go check it out:
youtu.be/DRZogmD647U?si=ZHR2…
Nice
🪐 Introducing Cantina Competitions 🪐
With @MorphoLabs! 🦋
• $200,000
• 2500 SLOC
• Cantina Code assisted (much bigger than you think)
• Invite Code ONLY
A new era for web3 security begins today.
👇No invite code? Huge opportunity below👇
Nice resource for all beginner gas golfers✌️
Gas optimization is the key to saving money on blockchain transactions! 💰 In our new video, @haruxeETH goes over the most important gas optimization techniques and security holes, so you can start saving blockspace and staying safe today! 🏃🏃🏃
youtube.com/watch?v=C--z0GbC…
The Web3 security community is truly awesome. Kudos @CodeHawks
This is a must watch for anyone who wants to get deeper understanding of the EVM
This quoted post is unavailable.
dethera retweeted
It's easy to work hard when everything goes your way.
But what about when things start to get tough and you feel like you aren't going anywhere? - Well, those are the times when you have to show what you are truly made out of.
Remember this, no matter where you are right now.
That's the truth - deep understanding of the codebase is the difference between exceptional auditors and mediocre ones.
Junior Auditor: (Discovers 4 active @code4rena Contests with different Pool Prizes: A- $30K, B- $80k, C-$100k, D- $55K)
Junior Auditor: wow, there is so much money to be made right now (quicky opens Twitter and post "Guys if you're not on C4 right now you're wasting your time, there is so much money to be made).
Junior Auditor: ain't gonna touch A, I better do B and C, so i can challenge myself with this Huge Codebase and make more money.
Poor dude opens up the docs of the two projects, reads all in less than 5 mins, opens up the
codebases reads 5000 lines of code in 30 mins. DM'ing the sponsors and starts asking the difference between an external function and a view function.
He continues grinding so hard back and forth with both contests. Unlucky for him, he couldn't find any bug. Instead of giving up, he switches to @SoloditOfficial doing pattern matching for each lines of the codes to dig bugs.
......finally ends up submitting 20 H 15 M, rejoicing and dancing.
Final result comes out, poor dude got $1.5 in contest B, $40 in contest C
Junior Auditor: Is this a joke? no way..
------------------------------
Junior Auditor failed to realize that:
- Making most out of contests can only be achieved submitting unique bugs.
- Participating in multiple contests at the same time divides attention and often leads to poor understanding of the codebases.
- Doing Pattern matching on @SoloditOfficial to find bugs in most cases is a a waste of time.
- Focusing attention on one contest at a time is the surest way to understands any codebases deeply and uncover bugs.
dethera retweeted
Little knowledge and high effort can land you in the top 10% of any contest.
Low effort and some more knowledge will land you in the top 50% (if you're lucky).
In the short term, effort is the best leverage you have.
dethera retweeted
When reviewing DeFi protocols claiming to support all ERC20 tokens, it's important to dig deeper.
Using SafeERC20 simply does not cut it!
Here's a non-exhaustive list of questions that you, as a security researcher should be asking, when reviewing such protocols 👇

























