zarf.eth 🦇🔊

[zarf.eth 🦇🔊 @zarfsec]

@chainsandtrains @superphiz This can easily spoofed as well by changing the relevant line in the source code of the client.

[zarf.eth 🦇🔊 @zarfsec]

@hievalir Perfect combo, see you next year! 🫡

[zarf.eth 🦇🔊 @zarfsec]

@Cryptonicle1 @ETHLisbon @ETHGlobal Oh got it! I'm not available during this weekend unfortunately :/

[zarf.eth 🦇🔊 @zarfsec]

@BowTiedDravee @certora Congrats!

[zarf.eth 🦇🔊 @zarfsec]

@JeanCavallera @Amxx Correct! https://t.co/s6Yyddlyl0

[zarf.eth 🦇🔊 @zarfsec]

Takeaway of the story: Do not manually update the totalSupply or balanceOf mapping, but use the built-in transfer/transferFrom/mint/burn functions!
OZ ERC20's implementation declares those variables as private such that inheriting contracts cannot alter them accidentally.

[zarf.eth 🦇🔊 @zarfsec]

@0xfoobar That OpenZeppelin typo though 🤣

[zarf.eth 🦇🔊 @zarfsec]

@wschwab_ @giovannidisiena I've read your blogpost series on reversing 0xa57b, awesome work!

[zarf.eth 🦇🔊 @zarfsec]

I'd like to level up my reverse engineering and EVM skills and what's better than learning by doing... 🤓Anyone knows any interesting or intriguing MEV bots worth reverse engineering? 🤖🔍 Lmk!

[zarf.eth 🦇🔊 @zarfsec]

@0xpeck mainnet address?

[zarf.eth 🦇🔊 @zarfsec]

@pashov 🫡

[zarf.eth 🦇🔊 @zarfsec]

See y'all there folks! 🫡

[Defi Security Summit @summit_defi]

Announcing the DeFi Security Summit 2023 in Paris, France!

We're back with two full days of programming with top leaders & researchers in the DeFi security space, directly preceding @EthCC.

Learn more: https://t.co/U2KTLVvXsb

What you can expect 🧵👇

[zarf.eth 🦇🔊 @zarfsec]

The subtle, yet very important difference between EVM compatibility and EVM equivalence.. I'd reckon we will see these kind of vulnerabilities more and more in the future unfortunately..

[Eden Au @0xedenau]

A project on zkSync raised 921 ETH ($1.7M) in a token sale, but funds are stuck forever in the smart contract.

The transfer() function works on Ethereum and other EVM chains, but not on zkSync.

[zarf.eth 🦇🔊 @zarfsec]

@optimizoor Well deserved, my man! 🫡

[zarf.eth 🦇🔊 @zarfsec]

@adrianhetman Exactly! It saves a lot of time ;)

[zarf.eth 🦇🔊 @zarfsec]

@0xNazgul @OpenZeppelin Congratulations ! 👊🏼

[zarf.eth 🦇🔊 @zarfsec]

@andyfeili Congrats Andy! 🎉

[zarf.eth 🦇🔊 @zarfsec]

@nascentxyz @brockjelmore Damn, can't wait to test it out! 👀