TM

actualizing...

[Jamaica Gleaner @JamaicaGleaner]

Energy Minister Daryl Vaz says communication from the Jamaica Public Service (JPS) “is not enough” and has demanded more detailed updates on power restoration efforts following Hurricane Melissa. #GLNRToday #MelissaAftermath

[TM @cybr009]

@MintPressNews respec mi G

[TM @cybr009]

@WFPChief @wfp_Caribbean @WFP_es @LolaCastroWFP @francediplo_EN @WFPGovts Big up

[TM @cybr009]

@nayibbukele Big up ur self mi G

[TM @cybr009]

@Awk20000

[Securr @Securrtech]

Master Web3 🚀🔥

The Learning Tree 🌳⚡️

|── Step 1: Blockchain & Web3 Fundamentals
| ├── How blockchains work (PoW, PoS, etc.)
| ├── Ethereum & EVM fundamentals
| ├── Smart contract basics (Solidity, Move, Sway)
| ├── Decentralization & trustless systems
| ├── Cryptographic principles (hashing, signatures)
| ├── Gas fees & transaction mechanics
| └── Nodes, RPCs & indexing services
|
|── Step 2: Smart Contract Development
| ├── Solidity deep dive (state, storage, memory)
| ├── Writing & deploying contracts on Ethereum
| ├── Interacting with contracts via Ethers.js & Web3.js
| ├── Gas optimization techniques
| ├── Upgradeable contracts & proxy patterns
| ├── Cross-contract interactions & permissions
| ├── Multi-chain & cross-chain smart contracts
|
|── Step 3: DeFi & dApp Development
| ├── ERC token standards (ERC-20, ERC-721, ERC-1155)
| ├── AMMs (Uniswap, Balancer, Curve)
| ├── Lending protocols (Aave, Compound)
| ├── Governance & DAOs (Snapshot, Aragon)
| ├── Cross-chain bridges & interoperability
| ├── Layer 2 scaling (Optimism, Arbitrum, zkSync)
| ├── NFT marketplaces & royalties
|
|── Step 4: Web3 Security & Smart Contract Auditing
| ── Common Web3 Vulnerabilities
| ├── Reentrancy attacks
| ├── Flash loan exploits
| ├── Oracle manipulation attacks
| ├── Signature malleability & replay attacks
| ├── Storage collision in upgradeable contracts
| ├── Unchecked return values & delegatecall risks
| ├── Timestamp dependencies & block manipulation
| ├── Front-running & MEV attacks
| ├── Cross-chain security risks
| ├── Gas griefing & DoS attacks
|
|── Step 5: Web3 Development Tools & Debugging
| ├── Hardhat, Foundry, Remix & Truffle
| ├── Ethers.js & Web3.js for frontend interaction
| ├── Debugging with Tenderly & OpenZeppelin Defender
| ├── Security tools (Slither, Mythril, Echidna)
| ├── Static & dynamic analysis for vulnerabilities
| ├── Fuzz testing & differential testing
| ├── Gas profiling & optimization
|
|── Step 6: Advanced Web3 Concepts
| ├── Account abstraction & smart wallets
| ├── ZK proofs & privacy-preserving transactions
| ├── MEV & its impact on DeFi security
| ├── Layer 2 data availability challenges
| ├── Composability & interoperability in Web3
| ├── Secure off-chain data oracles (Chainlink, Pyth)
| ├── Decentralized identity & Verifiable Credentials
|
|── Step 7: Get Involved & Build Your Reputation
| ├── Contribute to open-source Web3 projects
| ├── Write research blogs & security write-ups
| ├── Participate in Web3 hackathons & bounty programs
| ├── Submit vulnerabilities to top bug bounty platforms
| ├── Join Web3 communities & network with experts

[Securr @Securrtech]

EVERYTHING YOU NEED TO KNOW ABOUT WRITING TEST CASES FOR SMART CONTRACTS 📃

1. Setting Up a Smart Contract Testing Environment
2. Writing Unit Tests
3. Security-Focused Testing
4. Edge Case Testing
5. Advanced Testing: Fuzzing & Gas Efficiency

https://t.co/GFlEO1D3BM

[Emily Lai @emilylai]

https://t.co/Q8S3A5fO5H

[Suhail Kakar @SuhailKakar]

back to fundamentals

ethereum: explain like i’m five

[Suhail Kakar @SuhailKakar]

https://t.co/isAOmzdQJR

[Suhail Kakar @SuhailKakar]

how does a crypto app works?

[kankodu @kankodu]

Two years ago, I discovered a critical vulnerability in Balancer V2 that allowed attackers to create infinite token balances by front-running ERC20 deployments.

This bug earned me a $250k reward and was recently disclosed publicly:

[David Leung @dhkleung]

Now that we know who's behind the @Bybit_Official attack. Let's look at how the hack actually worked.

At a high level, the hack involved the 4 broad group of events:

1. Attacker deployed a trojan contract and a backdoor contract.

2. Attacker tricked signers of the upgradeable multisig "cold" wallet to authorize a malicious ERC-20 transfer to a trojan contract

3. Instead of transferring tokens, trojan contract replaces the master copy of the actual Safe multisig implementation contract with the backdoor contract, which is solely controlled by the attacker.

4. The attacker called sweepETH and sweepERC20 to drain the wallet of all its native ETH, mETH, stETH, and cmETH tokens.

[Vladimir S. | Officer's Notes @officer_secret]

Which tools you should implement after this @Bybit_Official hack? Here they are:

1. This: https://t.co/BOm4VWYpG7
2. This: https://t.co/sFxIrPt8Ig
3. This: https://t.co/Hpp15N8I7b
4. Implement: @ZenGo
5. Implement: https://t.co/LkWyGAZ8UJ
6. Use: @delegatedotxyz
7. Use: @AirGap_it
8. Acquire: @gridplus
9. You can also paste all of the calldata from gnosis straight here it It automatically decodes it: https://t.co/EvKJDNl6cv

[Martin Marchev @MartinMarchev]

7 mistakes that beginner Web3 security researchers make (and how to fix them) 🧵👇

[Rzizah @Rzizah_]

if you are either a beginner or an advanced auditor you have to make sure you're not missing attacks described here

https://t.co/1MpmSVR7JO

[Tom Dörr @tom_doerr]

Open-source notification service

[Securr @Securrtech]

Behind the MEME COINS, developers embed hidden vulnerabilities that let them rug at will.

One of the most common yet overlooked exploits?

🔴 The Stealth Mint Backdoor – A hidden function that lets devs print unlimited tokens and dump on holders.

Let’s break it down. 👇

[Shieldify Security @ShieldifySec]

Smart Contract Vulnerabilities

A collection of smart contract vulnerabilities along with prevention methods

One of our favorite resources for beginning auditors 🫡

https://t.co/R3aSNzHB60

[Stephen | DeFi Dojo @phtevenstrong]

Funding Rate Arbitrage for Dummies:

My Longest Thread Ever

🧵👇