deepcode.eth

information technologist

[thedao.fund @thedaofund]

If every team’s OpSec lessons could compound across the ecosystem, more projects could learn the easy way.

@officer_secret is turning hard-earned security lessons into practical guides, research, and education that help Web3 teams stay safer before things go wrong.

Learn more: https://t.co/oAnXeQLyNV

Support: https://t.co/jlhFhRFGZF

[thedao.fund @thedaofund]

TheDAO is back. BULLISH

A decade later, we’re opening a new chapter.

TheDAO Security Fund: activating 75,000+ ETH to strengthen Ethereum security.

https://t.co/VV3cH313TE

[deepcode.eth @deepcode]

This is probably the default account #0 from Hardhat: 0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266

[Worms @MarcoWorms]

gpt5 generated a test private key for my project that has enough funds in prod for me to lunch very well in brazil 😂

[Rekt News @RektHQ]

A betrayed blockchain expert becomes the ultimate insider threat.

Who truly holds the power, the architects of the system, or those who can break it?

Explore the dark side of Defi with this new work of fiction by Rekt News.

https://t.co/NgltqwQUP3

[Cointelegraph @Cointelegraph]

A crack team of 40 white hat hackers, led by @samczsun, and called SEAL 911, is taking on the hackers in real time.

Via @CointelegraphZN, Author: @maxparasol

https://t.co/U5SQScKklH

[cygaar @0xCygaar]

We are now 2 days away from Ethereum's Dencun upgrade, the largest fork since the Merge.

Here's a summary of the biggest changes in Dencun and how they'll affect you 🧵:

[Emiliano Bonassi @emilianobonassi]

Executing whitehacks is hard also for security professionals 🤖

But there are three important rules:

- test and don't change before execution
- execute in a single tx
- execute privately ( reorg 🤞)

Here a starter foundry repo 🫡

https://t.co/XUGwOZpkju

[@bytes032.xyz @bytes032]

Hey, this checklist is pretty cool!

You can totally use it when you’re going through audit reports or even creating new things.

https://t.co/LaCeOCkMDv

[pashov @pashov]

CREATE2 opcode usage potential issues/attack vectors:

- deployment griefing by front-running with same `salt` param
- selfdestruct opcode leads to a "metamorphic" contract
- not checking if the returned value is not the zero address (failed deployment)

What else?

[deepcode.eth @deepcode]

I just contributed to the 🕯️ KZG Ceremony 🕯️ using 0xddf…5d20 to help scale Ethereum

↓ Add your own randomness ↓ https://t.co/8RatkW1JX7

[horsefacts @eth_call]

Next up: Storage Structs (aka "explicit storage buckets," "Diamond storage," "unstructured storage").

A pattern for preventing layout collisions in upgradeable contracts, seen recently in @radicle Drips and @AstariaXYZ.

https://t.co/ymF7Rpuq6y

[Logarithmic Rex @LogarithmicRex]

(1/13) Introducing: Inevitable Ethereum

A new wiki-style site dedicated to @ethereum, the World Computer. History, finance, computer science, elliptic curve cryptography... everything needed to see the future.

To see what I see: Ethereum is inevitable.

https://t.co/Bg1pRERvuq

[Paul Razvan Berg @PaulRBerg]

🔥⚒️ PRBMath V3 is live 🔥⚒️

This is the most significant iteration on my Solidity library for advanced fixed-point math.

What's new:

- User defined value types SD59x18 and UD60x18
- Free functions
- Migration to Foundry
- Various optimizations

1/7
https://t.co/bRIV84oNm3

[Shanzson @shanzson]

For doing your best in any job role, you need to have the right mindset for that job.

My blog post on @viamirror "A White hat hacker mindset: From the eyes of a Smart Contract Auditor" discusses 5 key mindsets for a smart contract auditor.

https://t.co/bq7vYFnktd

#web3

[samczsun @samczsun]

if you inspect a transaction which calls an unverified contract, you'll get a best-effort recovery of the original function parameters. works as long as the contract uses the standard abi. no more hand-deciphering calldata!

[Immunefi @immunefi]

Immunefi is proud to present the Web3 Security Library, which aims to be the go-to resource for Web3 security.

You can access the repository here: https://t.co/4nI5ZpeZHh
Keep an eye on the repository as we will regularly update it with new resources 📚

[deepcode.eth @deepcode]

A cross-chain CREATE2 factory is deployed at address 0x4e59b44847b379578588920cA78FbF26c0B4956C on more than 20 blockchains (mainnets and testnets)

[0xngmi @0xngmi]

Together with @easeev we've deployed @nicksdjohnson's CREATE2 factory on avax and fuji. Now anyone can create contracts with the same address across all networks!

avax disallows sending our deploy tx by default, so had to run a node with a modified config

[Daniel Von Fange @danielvf]

These two ways of transferring ETH below are functionally identical - but there can be surprising difference in gas usage. In fact the call() version can pay approximately three times more in extra gas per 32 bytes of data returned!

1/5

[deepcode.eth @deepcode]

A tool to read EVM storage data - including mappings, arrays and upgradeable proxies

[Trail of Bits @trailofbits]

Shedding smart contract storage with Slither https://t.co/q6V3xjFKPV

[tincho 🪷 @tinchoabbate]

Do you know what happens when you send 1 DAI ?

I don’t think you really do.

I spent weeks seeking for the truth in Ethereum’s depths. Leaving all previous assumptions behind.

And I'm sharing this incredible learning journey with you👇

https://t.co/qQTvz9QQzQ