Library
34 results
Clear filters
SuiIntermediateMove treats assets as typed resources that can't be copied or dropped, stores state with owners instead of in contract mappings, uses signers and capabilities for access control, and avoids classic reentrancy.
#move#security#smart-contracts
EthereumIntermediateMEV is profit from ordering transactions. A sandwich attack front-runs and back-runs a public swap, capped by its slippage. Use tight minimum outputs from fresh quotes and private RPCs.
#defi#mev#security
EthereumIntermediateApprove is safe; unlimited, forgotten allowances and unread permit signatures are not. Approve exact amounts, use permit with short deadlines, read every typed-data signature, and revoke old approvals.
#security#tokens#wallets
BaseIntermediateERC-4337 makes user accounts smart contracts via UserOperations, bundlers, an EntryPoint and paymasters, enabling batching, gas sponsorship and recovery. EIP-7702 lets existing EOAs delegate to such code.
#account-abstraction#smart-contracts#wallets
GeneralIntermediateA bridge is only as safe as whatever verifies cross-chain messages. Most major hacks came from stolen validator keys, verification bugs, or bad upgrades, not the chains themselves.
#bridges#security
EthereumIntermediateStorage dominates gas costs: pack variables, cache storage reads, use constant, immutable, calldata and custom errors, emit events for off-chain data, and measure every change with forge snapshot.
#gas-&-fees#performance#solidity
GeneralIntermediateOn Bitcoin, scale confirmation depth with the amount at risk, since finality is probabilistic. On Ethereum, wait for the finalized checkpoint. On rollups, wait for the batch to be final on L1.
#consensus#transactions
HyperledgerIntermediateThe endorsements attached to the transaction don't satisfy the chaincode policy at validation. Check the real policy (often MAJORITY by default), endorse from every required org, and verify roles.
#enterprise-blockchain#troubleshooting
GeneralIntermediateBIP-39 encodes random entropy as 12-24 words and stretches them into a seed; BIP-32/44 derive every key from it. Store the words offline on durable media in several places, never digitally.
#cryptography#security#wallets
ArbitrumIntermediateRollups execute off-chain and post data to Ethereum. Optimistic rollups like Arbitrum assume validity unless a fault proof wins during a challenge window; ZK rollups post a validity proof per batch.
#scaling#zero-knowledge
ChainlinkIntermediateUse latestRoundData, reject non-positive or stale answers based on the feed's heartbeat, normalize with decimals(), and on L2s check the Sequencer Uptime Feed with a grace period.
#defi#oracles#security
