web3_code_hunt's profile picture. Blockchain Engineer

web3_code_hunt

@web3_code_hunt

Blockchain Engineer

web3_code_hunt reposted

React Native New Architecture of React Native is really a power for both 👇 1. For your App 2. For sharpening your skill to be a Sr. React Native Engineer I'm going to deep dive more 🚀 I have written the full flow of React Native Architecture here 👇medium.com/@anisurrahmanb…


web3_code_hunt reposted

#web3security investigators! 🔗discuss about Contracts with Anonymous Token Teams 1️⃣ Accountability 2️⃣ Transparency 3️⃣ Review standards 4️⃣ Mitigating risks 5️⃣ Investor protection 1️⃣ Accountability: When it comes to token development, it is crucial to have a known and…

auditx_eth's tweet image. #web3security investigators!

🔗discuss about Contracts with Anonymous Token Teams
1️⃣ Accountability
2️⃣ Transparency
3️⃣ Review standards
4️⃣ Mitigating risks
5️⃣ Investor protection

1️⃣ Accountability:
When it comes to token development, it is crucial to have a known and…

web3_code_hunt reposted

#web3 BUG - Improper Input Validation 👇 If access control is about controlling who calls a function, input validation is about controlling what they call the contract with. This usually comes down to forgetting to put the proper require statements in place. Here is a…


web3_code_hunt reposted

👇👇👇👇

#web3 BUG - Unexpected Ether  Attack 👇 If you find this line of code in SMART Contract - ❝ this.balance ❞ ✅ Then may be there is a BUG in Smart Contract Inside SMART Contract as the balance of the contract can be manipulated by hacker even without using any PAYABLE…

auditx_eth's tweet image. #web3 BUG  -  Unexpected  Ether  Attack  👇

If you find this line of code in SMART Contract

-  ❝ this.balance ❞

✅ Then may be there is a BUG in Smart Contract

Inside SMART Contract as the balance of the contract can be manipulated by hacker even without using any PAYABLE…


web3_code_hunt reposted

#Web3 Auditors Complete guide on ✅ FORMAL VERIFICATION ✅ SYMBOLIC EXECUTION Let's jump details in this Video of @PatrickAlphaC boss youtu.be/izpoxfTSaFs - an interview of @trailofbits 🫡 👉 Formal Verification is the act of proving or disproving a given property of a…

auditx_eth's tweet image. #Web3 Auditors

Complete guide on
✅ FORMAL VERIFICATION
✅ SYMBOLIC EXECUTION

Let's jump details in this Video of @PatrickAlphaC boss youtu.be/izpoxfTSaFs

- an interview of @trailofbits 🫡

👉 Formal Verification is the act of proving or disproving a given property of a…

web3_code_hunt reposted

💯 @auditx_eth team has break down all of it's Mathematical terms in total 13 Threads 👉 All Complex terms of Compound PROTOCOL in 13 Threads Stay connected with @auditx_eth team 🚀

✅ 🔔 Web3 Auditors, here 13 #Threads, complete explanation of - @compoundfinance White Paper 💯⏬ 🔔 More you know DeFi, more you get BUG 🔔 1️⃣ 👉 Collateral factors + Borrowing capacity:



web3_code_hunt reposted

#web3 security enthusiasts The - ❝ @compoundfinance ❞ PROTOCOL is best to start because 1️⃣ It is Clearly written 2️⃣ Perfectly Commented 3️⃣ DeFi terms are easy 4️⃣ Good Code Architecture 👉 All Complex terms of Compound PROTOCOL in 13 Threads

auditx_eth's tweet image. #web3 security enthusiasts

The - ❝ @compoundfinance ❞ PROTOCOL is best to start because 
1️⃣ It is Clearly written 
2️⃣ Perfectly Commented 
3️⃣ DeFi terms are easy 
4️⃣ Good Code Architecture 

👉 All Complex terms of Compound PROTOCOL in 13 Threads

✅ 🔔 Web3 Auditors, here 13 #Threads, complete explanation of - @compoundfinance White Paper 💯⏬ 🔔 More you know DeFi, more you get BUG 🔔 1️⃣ 👉 Collateral factors + Borrowing capacity:



web3_code_hunt reposted

#web3 BUG - Unexpected Ether  Attack 👇 If you find this line of code in SMART Contract - ❝ this.balance ❞ ✅ Then may be there is a BUG in Smart Contract Inside SMART Contract as the balance of the contract can be manipulated by hacker even without using any PAYABLE…

auditx_eth's tweet image. #web3 BUG  -  Unexpected  Ether  Attack  👇

If you find this line of code in SMART Contract

-  ❝ this.balance ❞

✅ Then may be there is a BUG in Smart Contract

Inside SMART Contract as the balance of the contract can be manipulated by hacker even without using any PAYABLE…

web3_code_hunt reposted

#web3 BUG - Unexpected Ether  Attack 👇 If you find this line of code in SMART Contract - ❝ this.balance ❞ ✅ Then may be there is a BUG in Smart Contract Inside SMART Contract as the balance of the contract can be manipulated by hacker even without using any PAYABLE…

auditx_eth's tweet image. #web3 BUG  -  Unexpected  Ether  Attack  👇

If you find this line of code in SMART Contract 

-  ❝ this.balance ❞ 

✅ Then may be there is a BUG in Smart Contract

Inside SMART Contract as the balance of the contract can be manipulated by hacker even without using any PAYABLE…

web3_code_hunt reposted

#web3 security enthusiast 🔰Restricted token minting prevents abuse by malicious or compromised owners. 1) Tokens with limited minting capabilities restrict the ability of the token owner to create or generate new tokens. 2) This limitation is implemented to prevent…

auditx_eth's tweet image. #web3 security enthusiast

🔰Restricted token minting prevents abuse by malicious or compromised owners.

1)  Tokens with limited minting capabilities restrict the ability of the token owner to create or generate new tokens.

2)  This limitation is implemented to prevent…

web3_code_hunt reposted

#web3 security enthusiast 🔗Token is not upgradeable: 🔰Using an upgradeable smart contract makes it easier for developers to solve identified problems. 🔰only have to create a new execution contract and update the proxy contract to point away from the old contract. With an…


web3_code_hunt reposted

#web3 security enthusiast ➡️ ERC20 token An ERC20 token is a standardized digital currency or token that operates on the Ethereum blockchain, allowing for seamless integration and interaction with various decentralized applications and services. ERC20 conformity checks are…

auditx_eth's tweet image. #web3 security enthusiast

➡️ ERC20 token

An ERC20 token is a standardized digital currency or token that operates on the Ethereum blockchain, allowing for seamless integration and interaction with various decentralized applications and services.

ERC20 conformity checks are…

web3_code_hunt reposted

#web3 security researchers! 🔗discussion on Risks of ERC20 Extensions 1️⃣ When dealing with ERC20 extensions, it's important to manually review the contract behavior as it may deviate from the original ERC specification. 2️⃣ Look for external function calls in the transfer or…

auditx_eth's tweet image. #web3 security researchers!

🔗discussion on Risks of ERC20 Extensions

1️⃣ When dealing with ERC20 extensions, it's important to manually review the contract behavior as it may deviate from the original ERC specification.

2️⃣ Look for external function calls in the transfer or…

web3_code_hunt reposted

#Web3 AUDITOR LOVERS 🔔 Audit Techniques Made Easy 🔊 Audit Techniques are like detectives that help us investigate project codebases. 💯 ⏩ to be a good-level auditor ✅ Let's dive in and explore some of these techniques! detail below 👇 ✅Stay connected with @auditx_eth

auditx_eth's tweet image. #Web3 AUDITOR LOVERS

🔔 Audit Techniques Made Easy

🔊 Audit Techniques are like detectives that help us investigate project codebases. 💯

⏩ to be a good-level auditor 

✅ Let's dive in and explore some of these techniques! detail below 👇

✅Stay connected with @auditx_eth…

web3_code_hunt reposted

#web3 security enthusiast discussion on ERC20 token: An ERC20 token is a standardized digital currency or token that operates on the Ethereum blockchain, allowing for seamless integration and interaction with various decentralized applications and services. ERC20 conformity…

auditx_eth's tweet image. #web3 security enthusiast

discussion on ERC20 token:

An ERC20 token is a standardized digital currency or token that operates on the Ethereum blockchain, allowing for seamless integration and interaction with various decentralized applications and services.

ERC20 conformity…

web3_code_hunt reposted

#Web3 Security Enthusiasts 🔔 Contract functions executing critical logic should have appropriate access control enforced via address checks. 💯 ⏩ to be a good-level auditor ✅ Let's jump in details 👇 ✅ Stay with @auditx_eth and learn more to improve your auditing skill…

auditx_eth's tweet image. #Web3 Security Enthusiasts

🔔 Contract functions executing critical logic should have appropriate access control enforced via address checks. 💯

⏩ to be a good-level auditor 

✅ Let's jump in details 👇

✅ Stay with @auditx_eth  and learn more to improve your auditing skill…

web3_code_hunt reposted

#Web3 security Enthusiasts Only 4 Step, give 1 month on Each 👇 1️⃣ @PatrickAlphaC 32 hour Sol Course - youtu.be/gyMwXuJrbJQ 2️⃣ @TheSecureum mind map - github.com/x676f64/secure… 3️⃣ @SoloditOfficial Critical BUG reports - solodit.xyz 4️⃣ @code4rena Contests -…

auditx_eth's tweet image. #Web3 security Enthusiasts

Only 4 Step, give 1 month on Each  👇

1️⃣ @PatrickAlphaC 32 hour Sol Course - youtu.be/gyMwXuJrbJQ

2️⃣ @TheSecureum mind map - github.com/x676f64/secure…

3️⃣ @SoloditOfficial Critical BUG reports - solodit.xyz

4️⃣ @code4rena Contests -…

web3_code_hunt reposted

BUG - Access Control 🤦‍♂️It seems like a simple mistake, but forgetting to place restrictions on who can call a sensitive function (like withdrawing ether or changing ownership) happens surprisingly often. Even if a modifier is in place, there have been cases where the modifier…


web3_code_hunt reposted

❝ BUG - ADDRESS VULNERABILITY TRICKS ❞ When you see any of these 3 in Smart Contracts 1️⃣ msg.sender 2️⃣ tx.origin 3️⃣ this 👉 Are they properly used ? 1️⃣ msg.sender -> Address of Caller (Contract/EOA) who Called the contract which has line of code msg.sender 2️⃣ tx.origin ->…

auditx_eth's tweet image. ❝ BUG - ADDRESS  VULNERABILITY  TRICKS ❞

When you see any of these 3 in Smart Contracts
1️⃣ msg.sender
2️⃣ tx.origin
3️⃣ this

👉 Are they properly used ?

1️⃣ msg.sender -> Address of Caller (Contract/EOA) who Called the contract which has line of code msg.sender

2️⃣ tx.origin ->…

web3_code_hunt reposted

#web3 security enthusiast Contract composition: Keep the contract simple to avoid unnecessary complexity. Complex token contracts need a higher level of review. Use Slither's human-summary printer to identify complex code and make it easier to understand. Ensure the contract…


Loading...

Something went wrong.


Something went wrong.