ret2basic.eth

@taichiaudit Founder | Web3 Security Researcher @yAuditDAO @zenith256 @fuzzland_ @plainshift | Core Member @DeFiHackLabs

[ret2basic.eth @ret2basic]

After ~3.5 years in web3 security, I finally achieved 300 crit/h/m count!😂Here is my updated portfolio: https://t.co/uCdYiyz00E

Any firm looking for contract-based auditor with move/solana/cosmwasm/daml experience? Happy to chat😁

[ret2basic.eth @ret2basic]

🍿🍿🍿

[Yi @SuplabsYi]

If you’re wrong, own it. If you mishandle a responsible disclosure, take your lumps. @codephobic

I followed USD8’s own security.md, privately submitted a Loss of Funds bug with a working PoC, then watched it get quietly patched with no credit and mocked as spam.

This is exactly how you teach researchers that responsible disclosure is a sucker's game.

I documented the case here:
https://t.co/wePfeHpi6J

cc @openzeppelin @demibrener @holajotola

[ret2basic.eth @ret2basic]

@IlloySci 有一批学生哥毕业就被取代 是真的过期了

[ret2basic.eth @ret2basic]

@0xenzo_eth Great work!

[ret2basic.eth @ret2basic]

@IlloySci Basic topology🥲

[ret2basic.eth @ret2basic]

@0xaudron Congrats! Can I get referral?

[ret2basic.eth @ret2basic]

@EliBenSasson Just because of the eth price, people are pissed off😂

[ret2basic.eth @ret2basic]

@adeolRxxxx just to say goodbye to c4

[ret2basic.eth @ret2basic]

Only a few hours left to submit final finidngs for code4rena😜

[ret2basic.eth @ret2basic]

@oot2k1 Some are worse than codex with simple prompts due to over-engineering

[ret2basic.eth @ret2basic]

@SEEMsec @wangtxxl 还得是你

[ret2basic.eth @ret2basic]

@blckhv 🤣It is just pretty funny, April was my highest income month in my entire career and this month my income didn’t even cover living expenses

[ret2basic.eth @ret2basic]

@sahuang97 do prompt injection

[ret2basic.eth @ret2basic]

@HackenProof @0xTonraq @Polaris_tow @0xaudron @Polaris_tow nb

[ret2basic.eth @ret2basic]

@kixnlu1 Cool paper. What I did is compiling a demo circuit locally and I found the helper function (like sqrt) in a .wat file, so webassembly did the calculation outside the circuit

[ret2basic.eth @ret2basic]

When learning circom, many people learn this rule: `<--` does not add constraints. `<==` adds constraints. True. But there is another question: if `<--` is not in the circuit, where does its computation actually happen?

(Yes I am reviewing circom)

[ret2basic.eth @ret2basic]

@SEEMsec 他放木马在你pc里蒸馏你呢

[ret2basic.eth @ret2basic]

A friendly reminder: when designing circom circuit it is important to work through such edge cases carefully. If not properly handled, in an usual programming language it leads to redundant computation only, but in a zk dsl it can lead to an actual logic bug.

[ret2basic.eth @ret2basic]

https://t.co/xsraa8gqSS See "The bug in the code" section by @RareSkills_io

In an usual programming language we would do `if (s == t) return;` to handle this special case, but can't do that in circom since both `s` and `t` are signals which are unknown during compilation.

[ret2basic.eth @ret2basic]

Main lesson: `<--` tells the witness calculator how to compute. Constraints tell the proof system what must be true. If something only appears in `<--`, it is computed but not automatically proven.

[ret2basic.eth @ret2basic]

Useful mental model: `<--` computes a witness value. `===` adds a constraint. `<==` do both. So `y <== x * x;` is roughly `y <-- x * x; y === x * x;`.