Ohwale

Dark scholar of web3. Delving into the abyss, ensuring smart contract security, and optimizing gas in the face of the void. 🌑 ☠️ 🔗

[Ohwale @dedohwale]

Introducing #DedEthAudits:

Empowering the security of your Solidity contracts.

Our experienced auditors (@DedOhwale, @Arzdev, @Solidityauditor), nurtured by contests and private audits, are your blockchain guardians 🛡️.

DM 📩 me for a quote today!

[Ohwale @dedohwale]

@bytes032 I am interested in joining! Sounds like fun

[Ohwale @dedohwale]

@arzdev @immunefi Arz the 🐐💯

[Ohwale @dedohwale]

@arzdev Lets go Arz!

[Ohwale @dedohwale]

@arzdev Amazing work Arz!

[Ohwale @dedohwale]

@calyptus_web3 Don't overthink it, simply mint 10, transfer, then mint again.

[Ohwale @dedohwale]

@zigtur The browser data alone would not have been enough though right? They would still need to log your metamask password via a key logger.

Either way, really cool! Thanks for the interesting read.

[Ohwale @dedohwale]

@cantinaxyz Very cool!

[Block @DegenShaker]

Absolutely delighted that my team, 7e1e (RED-LOTUS-REACH) won the best Analysis report on the MaiaDAO C4 contest! Great value can be given also in private reviews for clients delivering technical writing and expanded security research relevant to their protocol

@reachauditing

[Ohwale @dedohwale]

@0xnirlin What was your toughest hurdle?

[Ohwale @dedohwale]

@Quill_Academy Owner is not 0, and correct.

[Ohwale @dedohwale]

@Quill_Academy @akshaysrivastv Very nice finding you've selected. Will be looking for this in the future!

[Ohwale @dedohwale]

📝 Solidity Quiz Time

What can go wrong with `createPrivatePool()`?

⚠️ Note: `cloneDeterministic()` is from Solady.

[Ohwale @dedohwale]

@14si20 @code4rena Great effort! I hope it pays off. Keep it up 🔥

[Ohwale @dedohwale]

@PaladinCharles Interesting... Looking forward to the proposed solution!

[Ohwale @dedohwale]

@serverConnectd @CipherShastra The first parameter of `call` is the gas sent. In this case, it's 1.

If you use `gas()` as the parameter instead of 1, you will send all remaining gas to the call.

[Ohwale @dedohwale]

📝 Solidity Quiz Time

What happens when we call `doCall()` here?

[Ohwale @dedohwale]

@0xcyanide https://t.co/PJAOh9p8MF

Cipher got the answer right! The low level call fails due to being out of gas, but the return value is not handled correctly, so the overall transaction still goes through.

[Cipher Shastra ™ @CipherShastra]

@dedohwale Seems like the low-level call will fail, as there is not enough gas supplied. The return status of the call is not constrained as well.

[Ohwale @dedohwale]

@X3agleX @PoolTogether_ Great work on the solo! Creative griefing attack 🎉

[Ohwale @dedohwale]

@Quill_Academy Assuming _timelockBalances is in charge of locking the balance of the user, they are assuming operator == to.

Astute attacker Alice can have a contract mint shares for her, and avoid the timelock.

[Ohwale @dedohwale]

@0xSimeon @0xNihilist The getter is created by the compiler for public variables.

[Ohwale @dedohwale]

📝 Solidity Quiz Time

What does the `callSomeStateVar()` return?

[Ohwale @dedohwale]

@CipherShastra Great answer! Thank you for participating 🙏 have a wonderful day.