@psantloki “That is why the strongest institutions find people early and are recruiting at the most top tier universities when they are freshman.”
Damn inspirational
@zmanian The level of ass covering in this writeup is epic. “Our centralized bridge got hacked, let us tell you about how secure it is. It’s the victim’s fault for relying on us”
Next time it’s going to be an exploit of LayerZero’s DVN, and the victim’s poorly secured DVN
@AFDudley0 It’s trivial to prove this isn’t happening: NYC’s vacancy rate is 1.41%. It also doesn’t make any sense. If the landlord can fill one unit for $5k, why can’t they fill both units for $5k, or at least $4k?
@kermankohli@routemesh@CryptoSocrat0@litocoen Actually, Yearn V3 does exactly this with “getEndorsedVaults”. So, I could be wrong, but it seems that it would be possible for an attacker to run a node on your network, then serve their own addresses in response to getEndorsedVaults, and steal the money of users
@kermankohli@routemesh@CryptoSocrat0@litocoen Here’s a contrived example: if there was an AMM that returned the address of its pool contracts over RPC, and then the frontend sent money to this, an attacker running a node on your network could give the wrong address.