Topic
SuiIntermediateMove treats assets as typed resources that can't be copied or dropped, stores state with owners instead of in contract mappings, uses signers and capabilities for access control, and avoids classic reentrancy.
#move#security#smart-contracts
EthereumIntermediateMEV is profit from ordering transactions. A sandwich attack front-runs and back-runs a public swap, capped by its slippage. Use tight minimum outputs from fresh quotes and private RPCs.
#defi#mev#security
EthereumIntermediateApprove is safe; unlimited, forgotten allowances and unread permit signatures are not. Approve exact amounts, use permit with short deadlines, read every typed-data signature, and revoke old approvals.
#security#tokens#wallets
GeneralIntermediateA bridge is only as safe as whatever verifies cross-chain messages. Most major hacks came from stolen validator keys, verification bugs, or bad upgrades, not the chains themselves.
#bridges#security
GeneralIntermediateBIP-39 encodes random entropy as 12-24 words and stretches them into a seed; BIP-32/44 derive every key from it. Store the words offline on durable media in several places, never digitally.
#cryptography#security#wallets
EthereumAdvancedA proxy holds storage and delegatecalls an implementation. Transparent proxies keep upgrade logic in the proxy; UUPS puts it in the implementation, which is cheaper but can brick upgrades if done wrong.
#security#smart-contracts#upgrades
ChainlinkIntermediateUse latestRoundData, reject non-positive or stale answers based on the feed's heartbeat, normalize with decimals(), and on L2s check the Sequencer Uptime Feed with a grace period.
#defi#oracles#security
EthereumIntermediateUpdate state before any external call (checks-effects-interactions), add nonReentrant to every function sharing that state, and treat token hooks and user-supplied addresses as external calls.
#security#smart-contracts#solidity
