Certain type of Curve factory pool is encountering read-only reentrancy attack and causing a total loss of $11m(@JPEGd_69) + $13m(@AlchemixFi) + ...
Initial investigation founds that vyper compiler (0.2.15) doesn't implement the reentrancy guard correctly.
add_liquidity and remove_liquidity use different slot to control the reentrancy.
5/19 Or not. While being audited is a good step towards improving security, there are flaws: an audit will not guarantee the absence of vulnerabilities in your code. Additionally, audits are a one-time deal: the longer a protocol’s been up since its last audit...
Poly Network got rekt again; allegedly because of compromised hot keys.
It's going to keep happening untill our industry changes our approach to security.
Smart contract audits only scratch the surface.
ps Poly network has NOTHING to do with Polygon.
Given the recent Sturdy hack, its an important reminder that whenever a contract interacts or depends on Balancer Pools for some type of price calculation (usually getRate func) to keep in mind to use this lib
👇
https://t.co/z86PAIiRdN
to ensure its safe against reentrancy
@z0r0zzz i gib demo ♡
||| CheckTheChain ChatGPT Plugin Demo |||
step 1: copy and paste the prompt
step 2: edit the fields like removing blockchain address if you are not analysing a specific address
step 3: clearly define the task
step 4: watch 👁️
https://t.co/PxQldVJZiz
@Ledger_Support "Once the device is initialized, there is absolutely no way to retrieve the seed. Even apps installed on the device cannot read it because the non-volatile memory can’t be read by the apps and the OS doesn’t expose an API to access it" please make up your mind
me: i would like a way to show the entire world that i own cryptocurrency
ledger: ok
me: i'd also really like to share my seed phrase with some random people
ledger: ur not gonna believe this
@_evFM I mean adhd isn't about a lack of attention/focus. Its about not being able to regulate that focus/attention. People with adhd may get hyperfocused. Bam its 4 am in the morning, and no this is not just on the things they enjoy. But ofc it often is
@henlojseam I might not need it. But it could provide me with a better decentralization than otherwise. For example, i can hold dai, which is backed by a lot of rwa, I can then use it to stake. Need and convenience are different things. Many things in life we don't really need, yet we use
@tphillips@klassicd Well the people running the room in this case would be miners/validators. Not the devs. The devs are just the newspaper that said one could come to that location to trade bassicly. Once its out there you can't take that newspaper back
@ChrisBlec@lex_node I mean, there are many recorded cases of homosexuality in other animals, such as ducks(there are even recorded cases of necrophilia in ducks). So either we learn our sexuality or its innate, either way its not really a new thing in nature. If its consensual why do ppl care?