Robbie Youngtaek OH

dev/researcher/investor

[Robbie Youngtaek OH @ORobbie]

@ch4r10t33r 100% agree

[Safe.eth @safe]

🔊 Update: 4337 Canonical Module v0.1.0 Bug Fix Update

TLDR; No funds at risk.

We’ve identified and addressed an issue related to the optional paymaster feature in 4337 Canonical Module v0.2.0.

🧐 Read on for details:
https://t.co/EAf3CUBqaD

[Sunnyside Labs @sunnyside_io]

Test in Prod is not passing the quorum for rPGF😢

As a core dev building OP Stack days & nights, it's a bit discouraging. Come on.

https://t.co/OahPMnXOre

[Robbie Youngtaek OH @ORobbie]

@fasc1nate Technically it is more likely to Korean version of DIA not CIA because it is military based intelligence group. CIA equivalent of Korean was KCIA(now NIS), which is civil spy agency.

[Robbie Youngtaek OH @ORobbie]

@gakonst there are several kinds of optimizers
1) for hardware(e.g. fasttransformer)
2) by algorithm(e.g. quantization)
3) by hardware(e.g. TPU)

[Robbie Youngtaek OH @ORobbie]

@ekzhang1 It may differ by culture. As an Asian, this might be rude at some point. Cuz we tend to deliver the message without revealing our identity directly. But, I haven't experienced it yet, another culture that might prefer direct conversation would like this way.

[Robbie Youngtaek OH @ORobbie]

@deadrosesxyz @bytes032 if you read audit report, you only see the red dots from the plane. if you read exploits, you are now can see the real problem.

[Robbie Youngtaek OH @ORobbie]

@kristofgazso go, pimlico!

[Robbie Youngtaek OH @ORobbie]

@leekt216 @SeoulNatlUni congrats!!!

[Robbie Youngtaek OH @ORobbie]

@FourPillarsKR @AvailProject 혹시 https://t.co/l13qNrloAw 여기 RSS 구독도 가능한가요?

[Robbie Youngtaek OH @ORobbie]

@CoinbaseWallet @0xPolygon how to achieve this feature? Account abstraction?

[Kenzo @GreenGaguri0]

총 4개 트랙에서 수상🥳 (@UMAprotocol - Best Use, @airstack_xyz - Best Use in Consumer Application 외 2개)

유익하고 재밌었던 첫 @ETHGlobal . 기회가 된다면 수상작 소개나 후기 공유도 해볼게요~!
Let's go @teamheimdallr 👊

[Robbie Youngtaek OH @ORobbie]

@kristofgazso gogogo!

[taek.eth @leekt216]

Breaking @erc4337 infra for fun

tl;dr
- erc4337 hash function is not generating consistent userOpHash
- manipulating userOp calldata can make inconsistent userOpHash
- I developed a wallet that generates same userOpHash for any userOpHash 🤯 and quite secure(but don't use it)

[Robbie Youngtaek OH @ORobbie]

@pseudotheos so true...

[taek.eth @leekt216]

Disclosing the vulnerability that could have drained funds.
tl;dr
• latest commit of EIP4337Manager can be destructed but does not risk user’s fund
• 0.4.0 @safe based 4337 wallets are in risk of losing fund
• affected wallets are safely migrated

[Ben | Over 🌐 → x402 with Agentic Commerce @overnance]

We, Superblock, raised $7.5M last week. We will accelerate the development of a new mainnet named "Over," which provides a lightweight full node to enable anyone to run their own node. "Over" will be the most secure and stable mainnet through powerful decentralization.

[Robbie Youngtaek OH @ORobbie]

@Delphi_Digital defi 2023 !

[taek.eth @leekt216]

Last weekend, I found vulnerable signature usage in erc4337 sample contract. Since I have been approved to share this to public, here is a full thread about the detail.

TLDR; VerifyingPaymaster's deposit can be drained with various replay attacks

[nonce Classic @nonceclassic]

HEADS UP ✋ We’re back with @PhilosophiaVC
Presenting
2022–2023 Crypto Market Analysis — Part 3 🥳

This time @ORobbie taking you through…
Terra and FTX in order of events, their structural limitations and what ⛳️ to look out for in the future!

https://t.co/210eu0Vvuw