Daniel Luca 🦄
@cleanunicorn
Head of Tech @edenblockvc | Dev, Security, Investor | ex @fiatdao, @ConsenSysAudits, @alethioethstats @consensys🦇🔊 | crypto since '17
Mainnet Re-Entrancy Flaw Exploited
Found a mainnet re-entrancy flaw and I exploited it.
Been sitting on this secret like a hen on her egg; it's time for the reveal!
Watch the exploit in action, bending the chain to its will.
Time for you to conquer this technique too! 🔧🧠
A quick shout-out to the Peanut team (@0xkkonrad and @uwwgo). Had a decent chat about the ramifications of the issue and future safeguards. They were cooperative and responsive. 👏👍
Understanding ClonesWithImmutableArgs: Security Issues and Vulnerabilities
🚨 People continue to invent new ways to create security issues.
I found out about ClonesWithImmutableArgs, and I found a structural problem in this pattern.
It doesn't mean all contracts will be exploitable, but we must know when they are vulnerable.
twitter.com/boredGenius/status/1484618024564891648
Web Interfaces for Contracts List
Books I read in 2022
This last year of 2022 I was really focused on reading.
Let me show you which books I read and why you should at least consider giving them a try.
10 books in chronological order👇🧵
1️⃣ Farsighted: How we make the decisions that matter the most, by Steven Johnson @stevenbjohnson
Don’t try to make a lot of decisions, make good ones. It makes a world of difference to learn how to make the good ones.
goodreads.com/book/show/40981514
Mina First Look Self Reported Research
I'm learning ZK by playing with @MinaProtocol, the 22kb ZK blockchain.
Getting started was easy, and the experience is polished--but during this process, they upgraded the testnet with breaking changes.
Keep reading for some highlights 👇🧵
GasHawk first look
I started using a new product a few weeks ago that saves me ether on each transaction.
It's brilliant how this works and how easy it is to use. Best of all, it's saving me gas. So far, I saved ~35% ether on my transactions.
gashawk.io/
👇🧵
🦅 First of all, it's really easy to set up. You need to add a new RPC URL in your wallet 🦊 you're already using.
No need to install anything new; add the URL GasHawk provides, and you're good to go.