W.Max

Solidity developer for #Defi.
Auditor @code4rena.

[W.Max @_William_Max]

@ScopeProtocol @eulerfinance @AngleProtocol how about balancer bb-euler-usd?
18m liquidity, of which 8m is cash, will this be the only exit channel for euler users.
@templedao
must be in a hurry

[W.Max @_William_Max]

Oh, no

[PeckShield Inc. @peckshield]

Hi @eulerfinance: you may want to take a look: https://t.co/L7ddZhHNq5

[W.Max @_William_Max]

Godd, but wen? If released today, I wont be astonished $ERN will reach $1b TVL Lol.

[Ethos Reserve @EthosReserve]

It's times like this... $ERN

[W.Max @_William_Max]

@nem_veer @immunefi Congrats!

[W.Max @_William_Max]

@dev_chinmayf It is a technique to interact with the liquidity pair contract directly to swap instead of using the router. in this way, you can get the output token first and then transfer the input token. It is just like flash loan, thays why we call it flashswap

[W.Max @_William_Max]

$oath = great dev + great project + greate audit

[Code4rena @code4rena]

Keen to dig into asset management accounting, or maybe issuance and redemption logic? 🔎

Get amongst all of the above (and more!) in @EthosReserve's audit, with $144,750 USDC in the reward pool for Wardens who can find vulns.

Start hunting now: https://t.co/vHvf056IVi

[Dinduz @CryptoDinduz]

What is $fUSD and why its development is crucial for $FTM in a Thread!

5 Minutes Reading:👇

[W.Max @_William_Max]

@SlowMist_Team Oh... seems big trouble. No wonder he did not move fund into tornado cash.

[W.Max @_William_Max]

@immunefi Maybe the paper here helps with hash collision: https://t.co/kJaXCJv5qN, and the blog here is the create2 issue: https://t.co/qkgkeS1OLh

[W.Max @_William_Max]

@immunefi 1. there must a checker to check if it is a zero-address after create2.
2. If I find a hash collision, I can deploy again by passing 2 different testPool addresses with same hash value to re deploy the contract deployed by create2. This will influence the exsisting contracts.

[W.Max @_William_Max]

@immunefi Also the poolAddr can be zero address without check (if revert)

[W.Max @_William_Max]

@immunefi Hey, create2 is not safe in use because the deployer can call SELFDESTRUCT and deploy again the pool to replace the former pool with another but malicious contract to steal fund.

[W.Max @_William_Max]

@SolidlyDEX @MonolithETH_ I used to discuss with @VelodromeFi about making a solidsex like project for them. But looking this, the veNFT shouldn't be released with any liquid token. However, still believe in solidly and you can solve it and become more solid!

[W.Max @_William_Max]

@dedaub I thought these should be eliminated by processes like dead code elimination... No wonder deplying some contracts with inheriting many standard contracts costs toooo much gas.

[W.Max @_William_Max]

@GalloDaSballo Oh this reminds me auditing codes filled with `.call`, `.delegatecall`, `.transfer`, `.balance`...

[W.Max @_William_Max]

why again... market was attacked last year in April, Midas(Jarvis Network) last month. Now @dForcenet . I have tweet about Madis attack before.

[dForce @dForcenet]

wstETH/ETH Curve gauge vaults on Arbitrum & Optimism were exploited a few hours ago, and we immediately paused the dForce Vaults - other parts of the protocol remain intact and user funds are SAFE with dForce Lending.

We will come back with a detailed report and remedies soon.

[sudo rm -rf --no-preserve-root / @pcaversaccio]

Wait, we're seriously discussing removing `payable` modifier for solc `0.9.0`? Is this really worth the 24 gas savings? https://t.co/FRZZndPqHZ

[W.Max @_William_Max]

@bytes032 language of course solidity. I do love using ganache + remix if I am developing some small projects. Its sooo convenient and just write test contracts in solidity. for complex ones, I prefer hardhat. and for self audting, just use slither.

[W.Max @_William_Max]

@immunefi @PwningEth best honor for a whitehat. I wish to have one some day. Its awesome