btw "erc" 404 is inherently incompatible with erc20 or erc721, the event sigs of erc20 and erc721 collide
there's no distinguishing between transferring 10 tokens or the token id 10
if only there were this token standard that could manage tokens and nfts in a single interface
It's easy to forget that when you low-level call an address with no code it will never revert.
On the other hand if you call it using an ABI, solidity adds a check that the address must be a contract. Try/Catch does not catch this revert.
Les obsédés du peuple juif comme @kamilabderrahmn veulent boycotter Israël ?
Grand bien leur fasse. Ils vivront simplement moins bien, moins longtemps et en moins bonne santé 🤷♂️
Au micro de @StephaneSimon_1 sur @SudRadio🎙️💥
To all the watsons @sherlockdefi and wardens @code4rena: If you found a medium/high related to a weird token, and you want to underline your proof-of-concept with a real-world token, browse ERCx: the largest collection of weird tokens.
I want to tell my story so there is clarity around why I hate banks and am long on personal freedom movements.
The year is 2002, my first working year produced $10k in W2 income for a two person household. My rent is $650/mo and drive 1 hour every to work.
Last Christmas, I gave you Synthetix Perps V2
the very next year, we did 30B
This year, cus we haven't learned, we're gonna launch something at Christmas again...
I just got aware of a great need in the space, smart contract testing
Now branching to writing your unit tests, get that sweet 100% coverage report
Thanks @Jeyffre and @PopPunkOnChain for the idea.
This was how my first private audit went:
- Pay-per-Vulnerability
- Just shy of 5-digit payout
- Found 4 Highs, 4 Meds, several Lows
- Life lessons in the art of negotiation
- Highly satisfied client who then offered me a job 🤯
Fellow auditors, want to share some learnings and questions I discovered lately
All the awesome audit strategies that you read and hear about are just individual interpretations of "hallucinating all possible cases and checking if those are handled correctly"
As correctly pointed out by @0xcuriousapple : "Auditing is just traversing a graph of possibilities" , yes, the what ifs.
But the important thing is the ability to think and discover these possibilities : some use diagrams, state machines, some use heuristics
So I have a general question for you : How to improve the ability to progressively hallucinate more and more possibilities ? more and more state buildups ? more and more scenarios ?
Is fuzzing the alpha ?
Is checklists the thing ?
How do legendary auditors like @IAm0x52 discover scenarios we can't think of ?
Is any checklist ever complete ?
Share with other auditors and tell me your views on ways of training this discovery mind-muscle to span more and more scenarios