Once i’ve started doing audits, it was a bit overwhelming for me to simply read the code, without any hesitation. I’ve believed there is some magic pill, system, framework, that would make from me LSR in one month. Unfortunately there is no magic pill, and most of the frameworks fit for the people individually.

Web3 Security, as any other field require determination and patience.  Success isn’t built on the motivation, but on the hard work.  Every day we enter the battlefield, where we need to fight against others and most importantly, ourselves.

Let’s take a look on very interesting vulnerability that actually happened quite a while, but the quality is still astonishing till our days.

The root cause of the exploit was that during the swapExactTokenForToken attacker inputed the tokenIn and tokenOut as the same tokens. The main purpose of this function is to deposits MONO(\*token that plays crucial role during the exploit) tokens into the pool.

Resources used:

Hi folks ✌🏻 I see that concern about quantum threat became bigger and bigger with the Vitalik’s posts. Since this topic isn’t new (researchers for-seen this problem long time ago), right now we are staying on the point in time where we have to really be aware about it and think in a way, how to eliminate this problem.

Let’s start from the basics. Everyone knows that the blockchain stores the data almost forever. Consequently, the question arises: How much storage should the validator have to be able to validate the entire blockchain? The answer is: a lot!

Ethereum Virtual Machine is a crucial component of the Ethereum network, enabling the execution of decentralized applications (DApps) and the deployment of smart contracts. Every PoS validator should download this part of ‘software’ on their device to fully run the node.

Follow me on Twitter ✌🏻