Introducing: Protomerkle
Build merkle trees on-chain! 🧵👇
I've been working hard writing some contracts (coming soon!), optimizing different merkle tree designs.
Finally I've come up with a version I *really* like I decided to make a library out of it.
here's a scary thought:
Zero Knowledge Proofs
imply =>
Zero Knowledge Hacks
imagine $1B being stolen but you can't tell who or how (or even when or where)
now imagine printing $1T and you can't answer these questions.
solidity security tip:
instead of i++ you should write the ++ above the i so it looks like it's lifting weights and getting stronger.
hackers will think twice before attacking your contracts.
(yes this compiles)
solidity security tip:
instead of i++ you should write the ++ above the i so it looks like it's lifting weights and getting stronger.
hackers will think twice before attacking your contracts.
(yes this compiles)
Smart Contract tools I love 🧵
1.
@dethcrypto
it's loading any contract into visual code in your browser!
simply rewrite any etherscan[.]io url to deth[.]net and you're done.
you can also have a quick bookmark to rewrite etherscan urls.
all these fear mongering nay sayers trying to shine light about web3 hacks and how "it's not going great" -
I'm coming from web2 "classic" security and I can assure you it's a much bigger shit show:
- when hacks occur they are more often silent
- if ever the victim finds out,
it's kinda frustrating to see something I suggested two years ago as a github issue is now a company backed by VCs
(literally this; except I called the keyword `offchain` instead of `shadow`)
We’re proposing ERC-7571 🌗
A standardized syntax for shadow events within Ethereum smart contracts to make it easier for them to be specified, discovered, and fetched by any offchain developer tools or infrastructure.
go explore contracts on
it's awesome!
- no more contracts hell - just single flat file is displayed
- tree view for quick navigation doubles as interaction widget
- proxies resolved automatically
- view multiple addresses at once
- DARK MODE
solidity pro tip
(for security researchers and more)
here is on-chain debugging trick I really enjoyed using today with forge:
I deploy a version of the contract with debugging info such as console logs then replace the proxy implementation with the patched version.
need free testnet? anvil
need free testnet with access to the internet? anvil + ngrok
need free testnet with 100% uptime? anvil + railway
1. go to
2. fork
3. you done
Wrote a rust lib for working with solc's AST:
It aims to be 1-1 compatible with solidity's internal representation () and have identical visitor implementations.
Analysing the AST is now as simple as this:
Solidity generics / templates
a short thread about how to achieve this with some hacks & optimizations.
let's start with a neat trick to pass any type through calldata:
just spoke to developers of
(creators of 🔥)
really impressed by the progress they're making.
soon it could replace etherscan (and other tools) entirely!
ARE YOU KIDDING ME?!
and it's $1000/m if you pay monthly...
how.. HOW does that save on RPC bill if I can literally host MY OWN ARCHIVE NODE at that price?
first sneak peak demo:
the best (?) contract viewer experience
completely free and open-source!
coming soon to
(feedback welcome! thanks to
@smlxldotio
for sponsoring; this tweet does not endorse scroll and any appearance is completely coincidental)
testing new smart contract primitive - this something I wanted forever now:
access storage using labels, instead of some arbitrary slot numbers. similar to JSON.
do you like this syntax?
@StevenGlinert
"and multiple missiles"
hard to tell the exact price of those missiles, but they are comparably expensive. put that in GDP ratio and find out.
also the laser systems are coming. $2 to shoot down $2m missile.
@housecor
pair programming should be about 5% of the programming.
otherwise it's pear programming, one person is typing code and the other sits like a pear on a chair.
@hahussain
I was born and raised in Jerusalem.
- 4C is not stay-at-home cold for us
- people aren't home, they just don't hang out with al jazeera in their spare time
OMG IT'S PERFECT! 🥹
my contract inliner works amazingly well.
how easy will it be to understand functions now!?
only two days worth of coding
video shows 5 different levels of depth.
🍁 ERC420 - a tokenized multisig vault
my
@ethglobal
sydney project is a type of multisig contract where each signer has associated ERC20 tokens that represent signing power.
@dominicfrei
how to improve your twitter game:
1. escape velocity starts from just >1000 followers so keep going
2. find the best timezone for your audience. posts have finite lifetime, their birth being their prime time.
3. space your posts. you have finite algo-fuel, so if you make more
yo dawg, I heard you like web3 & music, so I created SoundPhrase.
why remember complicated seedpharses, words or numbers?
when you can just play a catchy tune and generate a private key or sign messages!
I *just* got this in the mail from
@ethereum
foundation 😭
it has the first merge block & slot inscribed on it in celebration of the merge, so you can understand how long it was delayed in the mail 🥺
thank you
@AyaMiyagotchi
it's beautiful!
yo dawg I heard you like evm... so I implemented evm in asm so you can have a vm in evm.
e=vm² (pronounced evm-squared; the = is silent), also spelled evm2, is an evm that runs inside evm.
rust is just fancy C++...
but why would you want to write C++ in 2023 :\
fancy or not. python & js aren't perfect but they simply work because they are *simple*
rust hurts my brain
are you tired of those pesky vanity addresses ruining our planet with their dirty mining?
just use modifier saveThePlanet {
require(uint256(tx.origin) >> ((40-d) * 8) > 0);
_;
}
replace d with the amount of digits you want to save.
Google is dying, gruesomely:
- Bard is a joke
- Gmail filters are dead, spam is celebrating
- Search is rekt by SEO
- YouTube defaults to lowest quality, can't change default; save money much?
- Ads monopoly being broken
- Graveyard of dead projects
- Laying off so many people
I received a medium report for Zerem.
even though it's not deployed, even through it's and not implemented anywhere, even though it's a public good I made during a hackathon - I paid a small sum to motivate him.
now he delivers big!
@deadrosesxyz
in crypto we pay the bounties to researchers who find deep/interesting stuff even though it’s not immediately exploitable. and then hire these researchers for an even deeper look.
such outcome reflects really poorly on twitter and it would certainly dissuade serious researchers
⛽️ Challenge for the EVM Optimizors ⛽️
normally signatures are composed of uint256 r, uint256 s, uint8 v and occasionally, as in this case, bytes which have additional uint256 length, and another uint256 offset when passed as calldata.
1/3
restaking is not some magic money booster.
restaking *is* leverage.
it does have interesting economic properties, the "staking" part.
but it also has leverage, the "re" part.
3x leverage? rerestaking.
4x leverage? rererestaking.
as steve jobs said: "are you getting it?!"
solidity is funny.
plain code: 488k gas
code + abstraction patterns: 491k gas
(diff +3k)
BUT
optimized plain code: 344k gas
optimized + abstractions: 342k gas
(diff -2k)
guess abstractions it is ⛽️
@naruto11eth
actually is more like
zk can prove he's over 18 so you don't have to look at the id he's showing
optimistic will drink the beer until somebody stops him