Bernard Wagner

[iosiro @iosiro_security]

🚀 Big news for the @arbitrum ecosystem! Introducing arbos-foundry – a fork of Foundry that brings native support for testing Stylus programs.

Developed by iosiro's @_dotvader for the Stylus Sprint, it brings the dev experience you love to the Stylus world.

[Bernard Wagner @_dotvader]

@iosiro_security @arbitrum Shipping arbos-foundry was rewarding and challenging. Forking Foundry to bring native Stylus testing wasn’t trivial, but unlocking fast, local WASM testing made it absolutely worth it. Thanks to @arbitrum and the Foundry team - excited to see what developers build with this 🚀

[Arbitrum @arbitrum]

Arbitrum is about to level up like no other EVM chain.

17 teams have just secured 5M ARB to innovate with Rust on Arbitrum.

[iosiro @iosiro_security]

Our latest bug report to @optimismFND in their sequencer stack allowed censoring of over 1.3m accounts for an arbitrary period of time.
Affected protocols included: @LayerZero_Labs @StargateFinance @HopProtocol @SynapseProtocol @AcrossProtocol + more.
👇
https://t.co/CMLbgHG6VL

[Bernard Wagner @_dotvader]

@gakonst To add using Postgres/BigQuery for the transactions, block headers, block bodies, and other less IOPS intensive tables might allow for faster syncs and reduce running costs. No need to replicate that data when scaling horizontally.

[Bernard Wagner @_dotvader]

@gakonst In the Q&A you mentioned someone replaced the KV store with Postgres. There a link to the implementation? Not to use, but good reference to see what needs to be done to support an alternative DB.

[Bernard Wagner @_dotvader]

@0xSalmanA @gakonst Can confirm. Started my sync using ZFS pool with two 2TB NVMe SSDs. Sync was taking a lot longer than expected. Reformatted to ext4 to complete sync, performed a backup to an external drive and reformatted to zfs. Had a few other hiccups so can't give good metrics to compare.

[iosiro @iosiro_security]

We reported an issue in the @nethermind client that could have led to a consensus failure w/ other Ethereum clients. Bounties were awarded by @ethdotorg and @GnosisDAO.
Another big one for @pleasew8t!
Details: https://t.co/ykzjZbBSVP

[iosiro @iosiro_security]

We recently disclosed a high risk double-spend vulnerability in @AcrossProtocol's bridge relayer infrastructure. No user funds were at risk! The issue was fixed and awarded with a $90,000 🪲 bounty. Read all the juicy details here: https://t.co/VDhmQuBpBW

[Bernard Wagner @_dotvader]

@gakonst @sourdzl @sina_eth_ @a_kirillo @ttobbaybbob Could be a lot more efficient if clustering was added: https://t.co/5YH7uQuUm0

[Immunefi @immunefi]

We helped @AshiqAmien disclose a critical bug in @88mphapp. At least $6.5m of funds could've been stolen by attackers. That's no longer possible.

Funds were whitehacked from the contract and returned to users.

Bug bounties work. Read the postmortem:

https://t.co/abAtp2FThn

[iosiro @iosiro_security]

We've just open-sourced Baserunner - a tool to explore and exploit Firebase datastores https://t.co/gaxTUSobQ5

[iosiro @iosiro_security]

If you're a pentester and interested in smart contract security, our latest blog post is for you:
https://t.co/Rir6NOYzn1

[Bernard Wagner @_dotvader]

@iamdevloper Where does `console.log("no error yet (24))"` fit on the scale?

[Bernard Wagner @_dotvader]

@johncdalton @Sarah_Mulvx Also no unboxed deals

[Bernard Wagner @_dotvader]

@sudo_vii Not great, not terrible

[Jedri Visser @jedrivisser]

Try out the #Android #FIDO2 APIs with this blog post and sample code
https://t.co/YC89HFLUig

[Bernard Wagner @_dotvader]

Results of some late night source code reading: https://t.co/Fl3hCNDWnc and https://t.co/KazYVegYXN

Awesome work by the @helmpack team, they made the disclosure process exciting and rewarding by responding to and fixing the issues in record time.

[Dominic Chell 👻 @domchell]

😭🤷‍♂️ https://t.co/aqxjbiJzeU

[Bernard Wagner @_dotvader]

The irony. #iamroot