🐸Smart🐸Contract🐸Programmer🐸

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

@shibi_kishore @cantinasecurity SR finds issues not found on audit reports and submits them

Audit reports are published after the contest begins

SR's findings are now invalid. His time and effort were wasted

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

@cantinasecurity
Do you think it's fair to publish audit reports into out of scope after the contest has started?

[Andreas @mlsandreas]

@vandadnp @kirat_tw @ProgrammerSmart @BekBrace @runeconnor @AkhilAiri Rust playlist by RustCurious #rust #rustlang
https://t.co/IKw0ksL7oH

[Merlin Egalite 🕛 @MerlinEgalite]

For those who are wondering, yes we do hire at @Morpho at the moment!

Go to: morpho(.)org/jobs#jobs-list

[Josselin Feist @Montyly]

We are hiring a Senior Cyber Security Engineer at @aave

The role focuses on security operations and architecture, including SIEM, identity management, and related infrastructure

Details: https://t.co/a0S1K77LOg

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

@skinfaxo Most important graph for me is the liquidator profit (orange)

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

Morpho midnight graphs
https://t.co/uQEixyxnte

[Certora @Certora]

Certora is hiring!

We're looking for a Blockchain Validator Infrastructure Engineer to own, operate, and expand our validator infrastructure.

✅ Hands-on experience with @solana or @SuiNetwork validators is a strong plus.

Apply ⬇️

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

@yoursbyte vault inflation attack uses donation to round down user shares

There are probably several donation attacks
i don't know which one you are referring to.

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

Vault inflation attack

x axis = donation amount
purple region = where attack is possible
green line = profit (attack vs no attack)

green line above y = 0 and inside purple region is where attack is profitable

Graph
https://t.co/FUoaFGtaLs
Code + notes
https://t.co/ljbq0YKgvF

[Immunefi @immunefi]

@MitchellAmador @Ehsan1579 Full Episode: https://t.co/RpR5GiBeMF

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

Optimal capital allocation is at the peak of the 1st graph

Graphs the sum of yield x user's position for reserve 0 and 1 (pic 1, 2, 3)

When change in yields are small, replacing the yield functions with constants approximates the exact solution (pic 4)

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

Yield optimization for 2 reserves in Aave V3

Give initial capital of C, how much should you put in reserve 0 and 1 to maximize yield?

Assumptions
- Similar assets (DAI and USDC)
- Or slippage and fee on swap is 0

Graph
https://t.co/Oa2olzE2iX
Code
https://t.co/nR3NIBoUUV

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

[Andre Cronje | Flying Tulip] Advice to Builders & Why He Came Back https://t.co/CwSe3l15tE via @YouTube

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

AST grapher

click on contract to see list of state variables and functions

https://t.co/WyOU61i1nz

[🐸Smart🐸Contract🐸Programmer🐸 @ProgrammerSmart]

2 columns to visualize Solidity contracts
left column - functions
right column - state variagles

1st picutre
Which functions read or write to this state variable?

2nd picture
Which functions and state variables does this function (balance()) touch?

https://t.co/WyOU61i1nz

[Luigi D'Onorio DeMeo @luigidemeo]

I'm hiring for a new associate role who will be working with me directly. If you are passionate about crypto and lending, work more than live and want an opportunity to massively accelerate your career, apply!

Heads up: it won't be easy and NYC is preferred

[thedao.fund @thedaofund]

Some transactions are too complex to understand from raw traces alone.

tx-graph by @ProgrammerSmart turns EVM transaction hashes into interactive graphs, helping developers and security researchers quickly see how contracts interact and how complex exploits unfold.

Learn more: https://t.co/1hNI6r00ra

Support: https://t.co/GdibBanEJW

[cvh @cvhessert]

Hiring a Senior Application Security Engineer at @0xPolygon

Role is full-stack: Solidity, infra, backends, frontends. Bug bounty triage is part of the daily rhythm.

JD: https://t.co/H3mQi0gv7N

[Certora @Certora]

Certora is hiring!

We're expanding into Web2 & Mobile security research.

If you have a strong background in application security or vulnerability research, this opportunity might be for you ⬇️