Mayowa Olatunji

Security Researcher || Kick-ass Technical writer || It's all about Jesus.

[Mayowa Olatunji @web3MIO]

Another Solid work @RareSkills_io

There's so much to learn here.

[RareSkills @RareSkills_io]

New blog post is up:

How Ethereum Address Derivation Works (Wallets, CREATE, and CREATE2).

The formulas for address derivation are simple, yet this article clocks in at over 4,000 words.

It's not just about the formulas to derive addresses -- it's about what goes into the formula that requires some depth of understanding.

Among other things, we cover:

- a brief tutorial on RLP encoding (needed for understanding EOA addresses and CREATE)

- how EIP-161 affects address prediction in EOAs vs contracts deployed with CREATE

- how EIP-2681 informs our understanding of why EIP-1014 (Create2) injects a 0xff into the address derivation

- how to deploy two mutually dependent contracts without a factory or setter function

Get ready to learn a lot!

Link in the reply.

[Mayowa Olatunji @web3MIO]

@0x3b33 stop it 😂

[Mayowa Olatunji @web3MIO]

@adeolRxxxx @pashov @panditdhamdhere 😅 lo marry. lol btw i got married 2 days ago. Let's see about that.

[Mayowa Olatunji @web3MIO]

@ZeroCool_AI @Kinetiq_xyz Again, that's so cool.

[Mayowa Olatunji @web3MIO]

@pashov @panditdhamdhere Ahhh ahhh. Really?

@adeolRxxxx is that true?

[Mayowa Olatunji @web3MIO]

@cyber_rekk We will be more than glad to host you, my good ser!

[Mayowa Olatunji @web3MIO]

@cyber_rekk My boss no vex for me. HRM told me she already did that's why i did not mention it to you.

[Zero Cool @ZeroCool_AI]

https://t.co/Pci0d3SswJ

[Zero Cool @ZeroCool_AI]

Zero Cool is honored to be listed alongside these top-tier security firms securing the future of Tangent.

[Mayowa Olatunji @web3MIO]

@ZeroCool_AI We are making progress!!

[Mayowa Olatunji @web3MIO]

@Montyly @aave congratulations brovda.

[Mayowa Olatunji @web3MIO]

POV: My wife and I

[Geek Lite @QingQ77]

这样的周末太幸福

[Mayowa Olatunji @web3MIO]

Let's be real. Who should decide what is out of scope for a project?

The Dev team or the Audit team? Do they always do this with an attacker's perspective in view?

[Mayowa Olatunji @web3MIO]

@itzshreyashh @ZeroCool_AI @4gontuk You read a lot.

[Zero Cool @ZeroCool_AI]

https://t.co/Zl19P3jD5B

[Mayowa Olatunji @web3MIO]

@pashov Most people are still in denial because they don't know how to use AI.

[Mayowa Olatunji @web3MIO]

Just signals back to back.

[Zero Cool @ZeroCool_AI]

Zero Cool achieved yet another top 10 finish on the Sequence contest hosted by Code4rena (🫡 RIP).

Out of 664 issues reported, most wardens missed this sneaky medium-severity finding that Zero Cool found, which could DOS the whole wallet.

This vulnerability stems from a subtle misuse of Solidity’s call semantics, where an external self-call inside a critical function (validateUserOp()) silently breaks the wallet’s core auth model.

Full write-up coming tomorrow!

[Mayowa Olatunji @web3MIO]

@starks_arq What can I use to make this kind of video?

[Mayowa Olatunji @web3MIO]

Is this dude a whitehat or a prophet?

[Vivek @0xvivekd]

Looking good. Next stop: #1.

[Mayowa Olatunji @web3MIO]

@cd_pandora Lol... Stop it.