Harshad Dewangan

Learning: Blockchain | Web 3.0

[Harshad Dewangan @haxshad]

Want to level up your web3 career?

I just applied to @cyfrinupdraft, the ultimate learning platform for web3 developers.

And it's completely free!

https://t.co/tPHLK93nSl

[Revoke.cash @RevokeCash]

Yesterday, we received reports of people seeing unknown approval transactions in their transaction history.

It turns out that this is a new scam where scammers use so-called gas tokens to steal money when victims revoke these "fake approvals".

[Harshad Dewangan @haxshad]

@pashov @zachobront I read the dyad report two days ago. It was great.

[Harshad Dewangan @haxshad]

@ananyacodes For emergencies or to get backup, use replit.
VS Code or PyCharm? Try both, then use whatever you like; this won't make a huge difference.

[Harshad Dewangan @haxshad]

@Aishwaryaradhya @metaworklabs Hi 👋

[Zellic @zellic_io]

A billion dollar bug:

How Zellic found and fixed a critical security vulnerability affecting all Move L1's, including Aptos, Sui, Starcoin, and 0L

This bug violated Move's core security properties and would've broken many smart contracts, e.g. flash loans!

Read more: 👇🧵

[Harshad Dewangan @haxshad]

@pashov How good are you at math?

[Harshad Dewangan @haxshad]

@p_e Audit

[cmichel @cmichelio]

yUSDT invests in the highest-APR USDT derivative: cUSDT, aUSDT, bZxUSDT, dydxUSDT. There's a misconfiguration which uses bZxUSDC instead of bZxUSDT. Here's how the attack worked:

[Beosin Alert @BeosinAlert]

Analysis:
The hacker first targets a pool with low liquidity to see if the MEV bot will front-run the tx.
For example, the hacker tempts the bot with 0.04 WETH.
It is found that the pool is indeed monitored by the MEV bot, the bot will also use all of its funds for arbitrage.

[sudo rm -rf --no-preserve-root / @pcaversaccio]

If you want to easily test for all cursed ERC20 tokens mentioned in the shared repo by @pashov use the following `token-tester` tool in your Foundry tests built by @saucepoint and @plotchy. Everything is one modifier away!
https://t.co/l1cGMUuWNP

[Ignas @DefiIgnas]

We learned that $USDC is backed by cash held in banks, except... banks don't actually hold that cash.

[Harshad Dewangan @haxshad]

@DadeKuma @code4rena Happy for you, bro. Congratz

[Harshad Dewangan @haxshad]

@akshaysrivastv @OndoFinance @code4rena Thank you for the write-up, ser, and happy Holi!

[OtterSec @osec_io]

@RaydiumProtocol just got hacked. It doesn't seem like a smart contract vulnerability.

Here's our analysis.

[Harshad Dewangan @haxshad]

As a developer, use ChatGPT wisely. As of now, it is dumber than you.

[Emin Gün Sirer🔺⚔️ @el33th4xor]

No amount of regulation can prevent fraud. But code can.

[Harshad Dewangan @haxshad]

Nothing, just remembering why Bitcoin was made.

https://t.co/nySjvvFtq6

[foobar/ @0xfoobar]

Hundreds of millions of dollars are now flowing out of FTX wallets, some speculate liquidators but it's late on a friday night, not typical times for such rapid heavy movements. Some withdrawals are being swapped from Tether to DAI. Hack or insider actions? $26 million here

[LearnWeb3 @LearnWeb3IO]

Learn Web 3. Get paid.

Slots for @EarnWeb3DAO filled up in 17 MINUTES yesterday. 🚀

Did you miss your chance?

The first 2,000 to fill out this form will get early access. 👇
https://t.co/y61bsVHfiq