🐸Smart🐸Contract🐸Programmer🐸

EVM | DeFi | ZK | DM for audits | prev @cyfrin

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

clz - opcode to return number of leading 0s in a bit

Before clz
Binary search to find most and least significant bits

With clz
msb = 255 - clz(x)
lsb = 255 - clz(x & -x)

What's x & -x?
See code comment

Code
https://t.co/bbIeqrMzvg

Binary examples
https://t.co/W4XeHgsv9A

[zefram.eth @boredGenius]

See Tamaswap for a good example of a “no free lunch” theorem that states nobody can steal user funds with any chain of actions

https://t.co/The5WGn1jV

[t11s @transmissions11]

Been learning about ZK-SNARKs lately! The core ideas behind modern hash-based schemes are surprisingly accessible & elegant 🧙‍♂️

Partly to teach myself, I wrote a post explaining them from scratch for people like me without a deep math background:

https://t.co/KeAgfMaT0k

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

Groth16

I will explain the complex equations in the future

Notes
https://t.co/r7W0cDstcW

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

@GB53F8 > i think i should continue my learning and give it some time
Yup. Use your time to learn the craft that you enjoy.

> Strength
Topics that you deeply understand.
In your example, from Aave v3, I would look into Aave v3 integration, forks, copies on other chains

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

@GB53F8 From what I've seen on x, all BBP have unpleasant experience for SRs

High submission fees, many duplicates, ghosting and dismissed as private known issues.

I would pick BBP by your interest, your strength and amount paid.

[Kann Audits @KannAudits]

🚀 Kann Audits Internship Program 2.0 is here!

We're back with our second paid internship program for Security Researchers!

Looking for motivated hustlers across:

• Solidity
• Rust
• TypeScript / Off-chain
• ZK

We're giving emerging talent the opportunity to work on real security audits, build strong portfolios, collaborate with other researchers, and level up their skills.

Ready to prove yourself?
Apply here: https://t.co/nib0rIQRsM

Once you've applied, comment "Applied!" below 👇

[yAudit @yAuditDAO]

yBorg - Week 1 Day 2

Meet @0xFlint_, the newest yBorg mentor. A gigachad security researcher with a diverse background who spends his free time getting lost in massive Rust codebases. He share's his audit methodology and thoughts on AI in a new video.

Today’s yBorg assignment:
- Watch the vid
- Soak up the alpha
- 👉 Think about how you’d turn his process into an AI-assisted workflow

For those who are joining us online, share a diagram in the comments showing how you'd turn Flint's process into an AI-assisted workflow - we'll be sharing examples from the Discord later.

This whole week we are thinking about process, both human and AI. We'll be sharing lots of diagrams and examples throughout the week and by the end of the week, fellows complete a diagram of what they are building!

@0xFlint_ also hosted an AMA on the discord and we can continue that here in the comments if anyone has anything they'd like to ask.

Enjoy the vid and don't forget to share your diagrams and ask questions in the comments!

[0x @0xProject]

We'd love to see you working with the best team onchain.

View 0x open roles now, including Sr Software Engineer on our API team.

https://t.co/ORxsCkqNEp

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

@rosarioborgesi Especially protocols with high TVL

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

Elliptic curve add, scalar mul and pair Solidity examples

Operations are executed by calling precompiles
Reverts if point are invalid
(0, 0) is point at infinity

Code
https://t.co/2vJW7tgmZL

[gusakov.eth | Lido @d_gusakov]

Dear staking protocols and delegated stakers of ethereum:native,

Glamsterdam hardfork is approaching @ethereum mainnet, and there is an important new attack on delegated staking that you should be aware of!

👇

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

@cryptodavidw Learning ZK, AI's answer were often incorrect, circular or superficial. Blog posts like yours helped a lot to double check that I was going in the right direction.

But yeah, educative content will fade.
Not much to gain for content creators

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

EC pairing

Notes
https://t.co/r7W0cDstcW

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

Most digestable explanation of Groth16 soundness

https://t.co/QjTLuD9K0V

Compares the coefficients for A, B and C and deduces that the ending equation is the Groth16 equation.

[Austin Griffith @austingriffith]

about to ship the first batch of wedgies

DIY off-the-shelf hardware wallet

signs on a gnosis safe

build your own or order one today

https://t.co/CQvexUUFQK

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

I thought about using it to sort collateralized positions in lending and stablecoin protocols so that a liquidation batches from most to least risky positions.

But O(N) find, needed to insert a new position, makes integration clunky

Similar idea used in Liquity V1 and V2

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

Sorted doubly linked list in Solidity

O(1) insert given the correct index
O(1) removal
O(N) to find the correct insertion index

Code
https://t.co/42pFCjx6vL

Test
https://t.co/fIoHzBgQ9A

[Schnilch @Schnilch]

The last months I realized that income from bug hunting is to unregular for me. Because of this I have decided to move more into private audits and do bug hunt only when I have some free time.

If you are looking for a security researcher feel free to reach out to me here -> https://t.co/Ai1IpRLq6k