Dima

Caching bugs in WEB3 and fish 🐟
Weekly updates on YouTube

[Dima @TokenPen]

I was recently testing @shyft_hq products, and I have to say if you are looking for reliable RPC/gRPC with great documentation, Shyft is the way to go!

[Dima @TokenPen]

🧵(3/3) Common places to check
· Any oracle
· proxy

[Dima @TokenPen]

delegatecall VULNERABILITY
🧵Open thread👇

[Dima @TokenPen]

(2/3) Mindsets to use to spot vulnerability
· Mirror mode
· What should happen
· What shouldn't happen

[Dima @TokenPen]

Been practicing some CTFs, and as it turns out, reading reports doesn't make you a coding genius. Who would have thought.😅

[Dima @TokenPen]

@hetmehtaa Tomorrow security 🙃

[Dima @TokenPen]

Found a nice GitHub with all vulnerabilities sorted out.
Good place to target practice some CTFs.

https://t.co/WPjGd9lo3b

[Dima @TokenPen]

@0xOwenThurm Does that mean I should decrease supply?🙃

[Dima @TokenPen]

@0xHun73r I would recommend spending at least one day a week to digest what's been happening and think if there are any improvements to the current pipeline.

[Dima @TokenPen]

@jonataspvt @spearbit One less plummer in our society :(

[Dima @TokenPen]

@jdegoes You know that feeling when you dropped Rust for Solidity 🫥

[Dima @TokenPen]

@adeolRxxxx Time for solo leveling arc. 😄🆙️

[Dima @TokenPen]

@TakiasSec I would recommend Obsidian, so many options with plugins. Plus, graph view makes you appreciate your effort with beautiful animations.

[Dima @TokenPen]

@PashovAuditGrp

[Dima @TokenPen]

Documenting vulnerabilities is useless.😮

Lately I shifted my approach to studying vulnerabilities from just documenting what happened to trying to understand how they were found and what techniques and mindsets I should use to find them.

[Dima @TokenPen]

🧵(3/3) Common places to check
· Likely to be found in DAO and voting mechanisms

[Dima @TokenPen]

Code With No Effects VULNERABILITY
🧵Open thread👇

[Dima @TokenPen]

🧵(2/3) Mindsets to use to spot vulnerability
· mirroring: if variable is incremented it should be decremented and used somewhere else, if function changes state it should affect some other function
· Is implementation same as documentation?
· Is function doing what it's supposed to?