Breaking Down the Mysteries of Ethereum: A Journey into the Yellow Paper

An attack vector that I recently figured out on my own was : atomically calling opposite functions like deposit/withdraw, stake/unstake etc. in the same block. This is useful especially if there is a lack of fee enforced or cooldown period that could prevent or make this attack less economically viable. Here are some examples :

LLM's are great for syntax understanding. But over reliance of it for understanding the logic behind implementation will lead to growth plateau in long run. It's better to think hard. The more you think hard, the more hard thinking becomes easier. We call it Neuroplasticity.

Diving into test files is still the best way to grasp a contract’s intended flow. A well-written test suite (not in Hardhat 🙏) saves time, letting researchers focus on depth. Auditing becomes fun and interactive when you play with the test files, rather than just staring.

RT @KevinNaughtonJr: mfers will write hello world and adopt this entire persona

vm.mockCall is heavily under-appreciated ! It avoids all the pain you need to go through to achieve the initial states of an exploit.

@Karan_B25 @sherlockdefi Solid 🤖

Here's an analogy: Understanding a codebase is just like understanding an engine. You grasp each part of individually and, then you understand the local synergy of multiple parts. Follow this for every part and you can visualize the entire engine running in your mind.

It took me a long time to realize this: Compulsive info-gathering isn’t just about dopamine—it’s rooted in low self-esteem that comes from feeling powerless. You chase “knowledge” to mask the lack of mastery over anything. It’s a mimicry of intellect, which is superficial.

With the rise in crypto prices, there will undoubtedly be a surge in on-chain developments. That will lead to an unparalleled demand in smart contract security. We are still heavily understaffed !

@Karan_B25 “Just when the caterpillar thought the world was over, it became a butterfly.” ― Chuang Tzu Keep on going brother, it's just a matter of time until you fly !

@SakshamGuruji @ethos_network @sherlockdefi 🫂

@Karan_B25 @ethos_network @sherlockdefi 🤝

@ret2basic Same here ser ! Was doing an audit

@bluntbrain_web3 ``You can send eth to the precomputed contract address even though it's not deployed. Once there's eth in the contract you can deploy the contract and have the funds sent to a different address if you wish.``

Ps: This is not just about chess. This is about life 🤫

@smbv1923 @ExtraFi_io @sherlockdefi Congrats bro. Happy to see you grow so fast !

@Shaping_Myself Trust ?

@sammyaudits @primev_xyz @cantinaxyz Super Saiyan 🔥