ocloo.exe 👨🏾‍💻

Lead Security Researcher @0xAfroSec

[tintinweb @nicht_tintin]

🚨👀

https://t.co/Rr2X8Q2YPt
https://t.co/TbUHEFKE3L

[TECHFUND Inc.( 🇯🇵JAPAN 🇸🇬ASIA) @techfund_inc]

🚨 Velocore $6.8M Exploit | Hack Analysis 🚨

Velocore suffered a $6.8 million loss. The attacker leveraged faulty logic in the velocore__execute() function.

Read more: https://t.co/1S1utcJgxi

#SmartContracts #CyberSecurity #HackAnalysis #Velocore

[TECHFUND Inc.( 🇯🇵JAPAN 🇸🇬ASIA) @techfund_inc]

In our latest deep-dive into Blockchain Bridges, we're exploring the technical intricacies of Polygon's PoS SideChain. Join us as we unravel the workings of this innovative blockchain ecosystem.

https://t.co/319lCuyoZa

#Blockchain #Polygon #PoS #SideChain #Ethereum #Crypto

[TECHFUND Inc.( 🇯🇵JAPAN 🇸🇬ASIA) @techfund_inc]

🚨 Beware of MEV Bot Scams! 🚨

Scammers are exploiting users' unfamiliarity with MEV (Maximal Extractable Value) and Solidity to steal Ether. They promote fake MEV bots via YouTube, claiming easy profits.

Learn more here:

https://t.co/BbxZxJUU6P

#solidity #security #bots

[nisedo @nisedo_]

Writing your PoC?
Need to interact with a local or deployed contract?
Tired of writing the whole interface by copying the func sigs and deleting the bodies over and over? 🫠

You can generate an interface from an ABI with one command: `cast interface` 🪄

→ For a local contract:

`cast interface foundry/artifacts/your-contract.sol/your-contract.json`

→ For a deployed contract (e.g. WBTC):

`cast interface 0x2260FAC5E5542a773Aa44fBCfeDf7C193bc2C599`

[Afi @afi_maame]

Using @getodk App API & ODK Central server to build a live Web-Map for handling Nationwide Data.

https://t.co/Ic1OCgO8tC

#odk
#odkcentral
#SotMAfrica2023

[ocloo.exe 👨🏾‍💻 @dev0cloo]

🤩

[ocloo.exe 👨🏾‍💻 @dev0cloo]

A link to the Github repo https://t.co/CTAp28jaW1

[ocloo.exe 👨🏾‍💻 @dev0cloo]

The goal tonight is to publish a package to Pypi. It's an AST parser for solidity written in Python. It's a modified fork of py-solc-ast and includes features like:
- Updated solidity grammar
- More Utility functions for working with nodes

[ocloo.exe 👨🏾‍💻 @dev0cloo]

Successfully done. You can find more info on how to use it in the readme and the whole codebase is heavily commented to help others. Here is a link to the package on PyPi
https://t.co/FoheqmUVzy

[ocloo.exe 👨🏾‍💻 @dev0cloo]

One thing I noticed in my time building the bot is the lack of resources on how to get it done. In the
@code4rena discord, there is also a popular request for resources on building a C4 bot. To help others, I have already started writing a tutorial on how to build one

[ocloo.exe 👨🏾‍💻 @dev0cloo]

I get excited building automation tools. Currently building a bot to participate in @code4rena bot races 🤩

[ocloo.exe 👨🏾‍💻 @dev0cloo]

Happy to say the bot is completed. All that is left is to add more issue detectors. Here is it's last report for Dopex:

[0kage.eth @0kage_eth]

..when compared to the devastation caused by black hats using this instrument.

Can some knowledgeable folks out there educate me as to why flash loans are needed in Defi?

Also, quantify the benefits of closing atomic arbitrage opportunities v/s the $$ lost due to hacks.

[ocloo.exe 👨🏾‍💻 @dev0cloo]

I absolutely loved reading this. I still read it from time to time. I'm very much looking forward to this year's rewind blog post.

[patrickd @patrickd_de]

You might remember last year's Ethereum Smart Contract Auditor's 2023 Rewind blogpost? (https://t.co/BPYo7QZUYF) Well, it's getting time to get started on the next one. And this year I'm trying a little experiment: Crowd-sourcing its creation!

[ocloo.exe 👨🏾‍💻 @dev0cloo]

@spyda_woman My worst fear has come to pass 😩

[ocloo.exe 👨🏾‍💻 @dev0cloo]

I can confidently say @dxsale has made themselves targets for black hat hackers with this and white hats definitely want nothing to do with such a protocol. Imagine making security researchers unfriendly towards you and putting funds at risk for $500.

[Decurity @DecurityHQ]

This is a story about how we found a critical vulnerability in @dxsale, helped rescuing more than $5 million, and got offered a $500 bounty.

https://t.co/lzUn6XdKmK

[ocloo.exe 👨🏾‍💻 @dev0cloo]

@dxsale shame on you for the pathetic $500 bounty you offered @DecurityHQ for a critical bug finding. You are a cancer to the space and I hope your users find a much safer place to keep their money.