Library
52 results
Clear filters
GeneralIntermediateA bridge is only as safe as whatever verifies cross-chain messages. Most major hacks came from stolen validator keys, verification bugs, or bad upgrades, not the chains themselves.
#bridges#security
EthereumIntermediateStorage dominates gas costs: pack variables, cache storage reads, use constant, immutable, calldata and custom errors, emit events for off-chain data, and measure every change with forge snapshot.
#gas-&-fees#performance#solidity
GeneralIntermediateOn Bitcoin, scale confirmation depth with the amount at risk, since finality is probabilistic. On Ethereum, wait for the finalized checkpoint. On rollups, wait for the batch to be final on L1.
#consensus#transactions
HyperledgerIntermediateThe endorsements attached to the transaction don't satisfy the chaincode policy at validation. Check the real policy (often MAJORITY by default), endorse from every required org, and verify roles.
#enterprise-blockchain#troubleshooting
GeneralIntermediateBIP-39 encodes random entropy as 12-24 words and stretches them into a seed; BIP-32/44 derive every key from it. Store the words offline on durable media in several places, never digitally.
#cryptography#security#wallets
ArbitrumIntermediateRollups execute off-chain and post data to Ethereum. Optimistic rollups like Arbitrum assume validity unless a fault proof wins during a challenge window; ZK rollups post a validity proof per batch.
#scaling#zero-knowledge
ChainlinkIntermediateUse latestRoundData, reject non-positive or stale answers based on the feed's heartbeat, normalize with decimals(), and on L2s check the Sequencer Uptime Feed with a grace period.
#defi#oracles#security
BitcoinIntermediateA stuck transaction pays too low a feerate. The sender can replace it with a higher-fee version (RBF), or anyone with an output can spend it in a high-fee child so the package gets mined (CPFP).
#transactions#troubleshooting
EthereumIntermediateUpdate state before any external call (checks-effects-interactions), add nonReentrant to every function sharing that state, and treat token hooks and user-supplied addresses as external calls.
#security#smart-contracts#solidity
EthereumIntermediateThe EVM hit a REVERT and undid the call. The reason is in the revert data: decode Error(string), Panic codes and custom errors with ethers, or replay a failed transaction with cast run.
#smart-contracts#solidity#troubleshooting
SolanaIntermediateFetch the blockhash at confirmed commitment right before signing, add a priority fee, and rebroadcast the same signed bytes until confirmed or past lastValidBlockHeight; only then re-sign.
#transactions#troubleshooting
