Topic
HyperliquidIntermediateHyperliquid builds the exchange into the chain: HyperCore runs order books, margin, liquidations and the HLP vault as native logic under HotStuff-style HyperBFT, with HyperEVM alongside under the same consensus.
#consensus#defi#performance
GeneralBeginnerKeep a small hot wallet for operations and hold the treasury behind several hardware-backed keys, held by different people, through multisig or MPC, with spend policies, transaction simulation and a tested recovery plan.
#enterprise-blockchain#security#wallets
DogecoinIntermediateLitecoin miners commit a Dogecoin block hash in their coinbase, so any Scrypt hash below Dogecoin's easier target counts as AuxPoW. Dogecoin gets Litecoin's hashrate but also shares its pools and risks.
#consensus#mining#security
SuiIntermediateMove treats assets as typed resources that can't be copied or dropped, stores state with owners instead of in contract mappings, uses signers and capabilities for access control, and avoids classic reentrancy.
#move#security#smart-contracts
EthereumIntermediateMEV is profit from ordering transactions. A sandwich attack front-runs and back-runs a public swap, capped by its slippage. Use tight minimum outputs from fresh quotes and private RPCs.
#defi#mev#security
EthereumIntermediateApprove is safe; unlimited, forgotten allowances and unread permit signatures are not. Approve exact amounts, use permit with short deadlines, read every typed-data signature, and revoke old approvals.
#security#tokens#wallets
GeneralIntermediateA bridge is only as safe as whatever verifies cross-chain messages. Most major hacks came from stolen validator keys, verification bugs, or bad upgrades, not the chains themselves.
#bridges#security
GeneralIntermediateBIP-39 encodes random entropy as 12-24 words and stretches them into a seed; BIP-32/44 derive every key from it. Store the words offline on durable media in several places, never digitally.
#cryptography#security#wallets
EthereumAdvancedA proxy holds storage and delegatecalls an implementation. Transparent proxies keep upgrade logic in the proxy; UUPS puts it in the implementation, which is cheaper but can brick upgrades if done wrong.
#security#smart-contracts#upgrades
ChainlinkIntermediateUse latestRoundData, reject non-positive or stale answers based on the feed's heartbeat, normalize with decimals(), and on L2s check the Sequencer Uptime Feed with a grace period.
#defi#oracles#security
EthereumIntermediateUpdate state before any external call (checks-effects-interactions), add nonReentrant to every function sharing that state, and treat token hooks and user-supplied addresses as external calls.
#security#smart-contracts#solidity
