K

[K @prapandey031]

@CantinaBouncer

[Cantina 🪐 @cantinasecurity]

🪐 Cantina Code Demo Release 🪐

A new era for security reviews is starting.

We will continue to roll out updates and features to make this the best code review experience across any industry.

Available to all Cantina researchers to explore below👇

[K @prapandey031]

Ready for this!

@CantinaBouncer

[Cantina 🪐 @cantinasecurity]

🪐 Introducing Cantina Competitions 🪐

With @MorphoLabs! 🦋

• $200,000
• 2500 SLOC
• Cantina Code assisted (much bigger than you think)
• Invite Code ONLY

A new era for web3 security begins today.

👇No invite code? Huge opportunity below👇

[Pyro @0x3b33]

For all my Solidity enthusiasts, Safe is looking for a developer. Retweet to spread the word and check out the job posting bellow👇
https://t.co/TAsF5lqOlW

[K @prapandey031]

@trust__90 Couldn't agree more!

Unconventional attack vectors provide you an edge.

It becomes even better if the attack vector comes from a repo other contracts use a lot (like OZ, Uniswap, etc.) - it gets scaled.

Going through protocols with relatively safer solidity logic also works.

[K @prapandey031]

@pcaversaccio Exactly.

2nd point above was in fact a real bug in the Wormhole bridge logic contract.

Details 👇
https://t.co/KGljcn8RyZ

[K @prapandey031]

Great article by @tinchoabbate on message traps in Arbitrum bridge.

The point that intrigued me the most - Executing message on L1 is just one step of many in the relayer's transaction.

Highly recommend 👇
https://t.co/LqrYPVeUGY

[Solidity @solidity_lang]

The Solidity Developer Survey 2022 is live! 🎉 Like in previous years, this survey helps us to improve the language + compiler further and shape the future roadmap of Solidity. Please participate & spread the word about it!
📝: https://t.co/dR4wKUiKGi
https://t.co/C0rR361MpR #xp

[K @prapandey031]

@w1nt3r_eth So use the bits to store your stories 😉

[K @prapandey031]

@samczsun Would love to try!

[K @prapandey031]

@samczsun Really want this one!

[K @prapandey031]

Saddle finance hack analysis by @immunefi

Enjoyed every bit of it!

Would be great if it includes the required mathematics + description of related protocols to understand the root cause clearly.

https://t.co/iBG9L87nly

[Immunefi @immunefi]

We're right on the edge of 30,000 followers (we don't buy them).

If you've enjoyed our work, give us a RT and a follow:))

-$62m paid to whitehats
-$25b in your funds saved

[K @prapandey031]

Saddle finance hack analysis by @immunefi

Enjoyed every bit of it!

Would be great if it includes the required mathematics + description of related protocols to understand the root cause clearly.

https://t.co/iBG9L87nly

[K @prapandey031]

Great series on EVM deep dives by @noxx3xxon.

Highly recommend for Solidity devs / auditors!

The first one in the series 👇
https://t.co/xhqm7XODi0

[K @prapandey031]

@PwningEth Thank you!

[K @prapandey031]

@smit_helps @OpenZeppelin Sure. I think the mentioned solution to your question suffices.

You need to revert through the "notify" function just for the first time.

Problem in your flow is that when the GoodSamaritan contract calls "transferRemainder", the "notify" in your contract reverts again.

[Hardhat @HardhatHQ]

⚠️ PSA: Hardhat has not launched any kind of desktop app. Be careful with spam messages sent to the community containing links to a malicious website.

[Trail of Bits @trailofbits]

Over the years, we have accumulated advanced knowledge and guidance for writing better smart contracts. We are sharing this knowledge in the first release of building-secure-contracts:

https://t.co/CIWfW29rSZ

Check out the repo to learn about best practices and tooling!