Deogracious Aggrey

Technology & Science|| Blockchain||

[Lewis Hamilton @LewisHamilton]

REMEMBER WHO YOU ARE

[Deogracious Aggrey @deograciousagg1]

@YaliSara3907 @Anilahati0n @macaiyla @FBI

[Prezenti @prezenti_grants]

Check out prezenti grants on @Celo

https://t.co/HJwxgFyf3n

[Deogracious Aggrey @deograciousagg1]

@VitalikButerin Insightful

[vitalik.eth @VitalikButerin]

Against choosing your political allegiances based on who is "pro-crypto"

https://t.co/rEbRjZYtFB

[Gateway FM @gateway_eth]

Last Tuesday’s Scaling Web3 Hackathon with @encodeclub was great! Loved seeing finalists’ project pitches 🎤
Find out more through Encode’s article below!

[Gateway FM @gateway_eth]

📣 Big shoutout to all who joined https://t.co/oEc8WBtety challenge at the Scaling Web3 Hackathon by @encodeclub! Your energy & creativity made it a huge success 🚀! We're glad to announce the winners: 🥇Reselll Store, 🥈Fedha․io and 🥉Reign Protocol! Congratulations to all 🎉!

[Patrick Collins @PatrickAlphaC]

@LazioAlex96049 @carlitox477 @code4rena @cyfrin @giovannidisiena @CodeHawks You did better than me on my first competitive audit. I found nothing my first time.

[Deogracious Aggrey @deograciousagg1]

@marek_ @lavanetxyz Kh7

[Deogracious Aggrey @deograciousagg1]

@SolidityScan I have Dm the source code, and have posted the link to the github as well

[Deogracious Aggrey @deograciousagg1]

@SolidityScan https://t.co/uNAcgLMWzv

[Prof. Feynman @ProfFeynman]

• Study hard.
• What others think of you is none of your business.
• It's OK not to have all the answers.
• Experiment, Fail, Learn and Repeat.
• Knowledge comes from experience.
• Imagination is important.
• Do what interests you the most.
• Stay curious

[Deogracious Aggrey @deograciousagg1]

@xyz_remedy By hashing the message before signing and verifying, you can ensure that the modified s' value will not result in a valid signature for the same message.

[Deogracious Aggrey @deograciousagg1]

@xyz_remedy However, since the group order n is explicitly defined as a constant (uint private constant n = 0xd0d3dc4be6d0d1d91a46b371e;), it is publicly accessible within the bytecode. As a result, an attacker can exploit the malleability issue by modifying the s value in the signature.

[Deogracious Aggrey @deograciousagg1]

@xyz_remedy To fix this malleability issue, you should avoid using the group order n directly in the signature verification process. Instead, use proper techniques such as message hashing to prevent signature malleability.

[Deogracious Aggrey @deograciousagg1]

@xyz_remedy Solution is to handle the case when 'aa' is 0 and return an error or revert the transaction as shown below

[Deogracious Aggrey @deograciousagg1]

@xyz_remedy The modInverse function uses the Euclidean algorithm to calculate the inverse of aa modulo m. If aa is 0, the Euclidean algorithm will terminate immediately, and the function will return 0. However, 0 is not the inverse of 0 modulo any number, so this is an incorrect result.

[Glider @glider_xyz]

Go!
Challenge your skills in Remedy #spotthebugchallenge and win a prize of 0.2 ETH!

1️⃣ Like this tweet;
2️⃣ retweet it;
3️⃣ identify the vulnerability;
4️⃣ post your solution.

Be the first to submit a correct answer and get your much-deserved reward 🏆.
And don't forget to follow @hexens and @xyz_remedy.

[hexens @hexens]

Go!
Challenge your skills in Hexens #spotthebugchallenge and win a prize of 0.1 ETH!

1️⃣ Identify the vulnerability;
2️⃣ post your solution;
3️⃣ like this tweet;
4️⃣ retweet it.

Be the first to submit a correct answer and get your much deserved reward 🏆.
And don't forget to follow @hexens.