ret2basic.eth
@ret2basic
Followers
1,584
Following
3,611
Media
69
Statuses
1,676
Security Engineer Intern @zksecurityXYZ | 🚩 CTFer at @DeFiHackLabs | @TaiChiWeb3Sec audit group | @RareSkills_io ZK+Circom graduate | EVM + ZK
GMT+8
Joined January 2018
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
FEMA
• 764979 Tweets
ORM BKK INTER CATWALK
• 274097 Tweets
裏金議員
• 129455 Tweets
True Way Of Worship
• 109686 Tweets
SB19 LIVE
• 73834 Tweets
#ドラゴンボール超スーパーヒーロー
• 46089 Tweets
#AlwaysToYouHannie
• 30427 Tweets
タリーズ
• 24923 Tweets
Mauritius
• 22584 Tweets
Chagos Islands
• 22362 Tweets
ピッコロさん
• 20961 Tweets
$RDOG
• 19962 Tweets
ダンダダン
• 19440 Tweets
スタートライン
• 18121 Tweets
Luis Carlos Vélez
• 16033 Tweets
コータロー
• 15318 Tweets
チカッパ
• 12305 Tweets
首相方針
• 10850 Tweets
セキュリティコード
• 10605 Tweets
比例重複
• 10454 Tweets
Pinned Tweet
Right now we have 3 members from
@DeFiHackLabs
CTF team solved all challs on
@onlypwner
:
@YQ996CO28254695
,
@LHuangkun
and myself😀
If you are a top player at onlyPwner and you want to play CTF with a team, please DM me! We are always looking for talented new members.
3
3
32
I am taking break from auditing code and doing a research week (May 18th - 24th). Will share my progress here.
Main topics:
- ZK: Groth16, Plonk, ZK rollup, zkEVM
- Uniswap V3
- Fuzzing and Invariant Testing
- Novel bug bounty report and hack incidents
- Rust, Substrate, Solana
6
0
121
I am thinking starting a 8-week ZK study group that goes over MoonMath manual in April/May. Who is interested?
52
10
114
Spent some time going over
@i2huer
's paper "Demystifying Exploitable Bugs in Smart Contracts" and wrote a non-academic "writeup" version of the paper. Enjoy.
4
18
77
Let’s see how many people in web3 recognize this:
1. rdi
2. rsi
3. rdx
4. rcx
5. r8
6. r9
25
3
55
It is happening! I am leading this 8-week moonmath manual study group, see you all at ZK Hack discord.
🌑🌒🌓🌔🌕🌝
Many asked for it,
So we're doing it.
Join our Discord to know more about the upcoming cohort of our 𝐌𝐨𝐨𝐧𝐌𝐚𝐭𝐡 𝐌𝐚𝐧𝐮𝐚𝐥 𝐒𝐭𝐮𝐝𝐲 𝐆𝐫𝐨𝐮𝐩 (link in next tweet).
Big thanks to
@ret2basic
&
@LeastAuthority
for their support.
🙏🙏🙏🙏🙏🙏
4
7
44
6
1
52
I compiled some of my web3 security research notes here: . The list is expanding, hopefully it is helpful.
3
16
45
Real dovahkiin implements Groth16 from scratch.
Here is my implementation. Enjoy.
4
1
49
I found an interesting question in Stanford CS251 2021 final exam:
Given the code below,
1) Suppose totalSupply() == 16370, what is the maximum number of NFTs that you can still mint?
2) Briefly write an attack contract
3) Mitigate by modifying one line
7
6
47
Elliptic curves reading list Part 1:
For those who want a gentle introduction to the theory of elliptic curves, "Elliptic Tales" by Ash & Cross should be the very first step. This is an undergrad level text which is pretty self-contained and slow-paced.
6
5
45
I am at 15 🥹
🎉 Secureum RACE-30 Results 🎉
💨 Number of Runners: 140
⚖️ Median Score: 3.5/8
🥇 Top Score: 8/8
🙏 Designer:
@Montyly
🏆 Top-32 Leaderboard 🏆
0
4
22
9
0
45
For those who are interested in Rust dev and MEV, check out the code of artemis framework or even build a clone version of it from scratch.
1
2
41
Ok we will do it since many people show interest. I will send out discord invite link on April 1st and this study group officially starts on April 8th. Pls only join us if you can make it to the end. If you will quit in middle of the process it is better to quit now.
I am thinking starting a 8-week ZK study group that goes over MoonMath manual in April/May. Who is interested?
52
10
114
3
6
39
Elliptic curves reading list Part 2:
If you want to brush up some unfamiliar topics in abstract algebra, I recommend reading "A Book of Abstract Algebra" by Pinter. Personally I think it is the best choice for your first book in abstract algebra.
1
1
41
Elliptic Curves reading list Part 4:
Another abstract algebra book: AATA. Three things in this book stand out:
1. Each concept comes with a bunch examples
2. Each chapter has Sage exercises
3. It is free to read in a nice in-browser reader
1
3
41
Announcing my new blog at ! The first article is about ECDH small subgroup attack and invalid curve attack. There are many details involved so I am sure there are mistakes, free feel to DM me if you find any😁
5
0
38
Glad to work with
@schaliasosvons
on this project! The repo now can be viewed publicly at .
More bugs coming to the repo 😎
1
3
42
Research week day 4 done.
Today I started with ZK MOOC lecture 1, 2, and 12:
Lecture 1:
Lecture 2:
Lecture 12:
Lecture 1 and 2 were a review for me, lecture 12 is brand new knowledge.
Research week day 3 done.
I recall Tim Becker gave this advice for learning zk:
I still don't know a few topics from this list, so I did some research.
1
0
14
2
0
39
Update: I am collaborating with
@__zkhack__
community for this study group so it will happen in ZK Hack discord. More details coming in the next few days. Will make official anoncement on this once everything settles down.
I am thinking starting a 8-week ZK study group that goes over MoonMath manual in April/May. Who is interested?
52
10
114
3
3
37
Sharing a few resources for understanding quotient groups:
1.
2.
3.
4.
5.
6.
7.
Go over them in this order.
0
3
37
Building my new blog😎 The first article will be two related attacks on elliptic curve, stay tunned
8
0
36
Wrote an article explaining basic gnark concepts to those who already know Circom and how snark proof system works.
Tell me if it is helpful :) Planning to write more such articles and make it a series.
0
3
39
Thinking of writing technical analysis on Taiko protocol:
Part 1: how Taiko works
Part 2: sigma prime audit report analysis
Part 3: C4 audit report analysis
How is that sound?
5
0
33
Those 3 latest zk articles (p vs np, arithmetic circuit, finite field) from
@RareSkills_io
have some of the best explanations that I have ever seen. Check out
3
8
34
I finally figured out a technical detail regarding polynomials... Recall that in Groth16 we make the proof succinct by evaluating polynomials (generated by Lagrange Interpolation) at a random point. This technique is supported by Schwartz-Zippel Lemma.
4
1
32
We got 9th this time🥹Congrats to the winners
Ethernaut CTF 2024 has wrapped up!
🥇
@ambergroup_io
🥈
@DecurityHQ
🥉
@statemindio
Stay tuned for rewards and POAPs via email this week👀 Until next time!
Check out challenges & solutions here:
5
11
66
3
0
32
Best lectures from DeFi MOOC 2022:
- Lecture 2: What is Blockchain? by Dan Boneh
- Lecture 10: Privacy on the Blockchain by Dan Boneh
- Lecture 12: Practical Smart Contract Security by samczsun
2
3
31
I been participating in
@TheSecureum
RACEs for about a year, here is what I achieved:
- 6 times top 32
- 4 times top 10
- 3 times top 5
- Highest ranking was 2nd place
Goal: win 1st place in the next couple of months.
3
0
30
Research week day 2 done. Today is another zk day, need to catch up uniswap v3 tomorrow lol.
First thing I did today is reading this:
It explains some commonly-used zk terms in "succinct" way, which I find very helpful.
Research week day 1 done. Here is a summary of what I have learned today.
The main topic for today was "polynomial". I know a few big theorems about polynomials but don't know how to prove them, so I did some research.
1
1
28
2
2
31
Top 10 again😎
🎉 Secureum RACE-28 Results 🎉
💨 Number of Runners: 135
⚖️ Median Score: 3.5/8
🥇 Top Score: 7/8
🙏 Designer:
@palinatolmach
🏆 Top 32 Leaderboard 🏆
1
3
28
7
0
30
Research week day 1 done. Here is a summary of what I have learned today.
The main topic for today was "polynomial". I know a few big theorems about polynomials but don't know how to prove them, so I did some research.
I am taking break from auditing code and doing a research week (May 18th - 24th). Will share my progress here.
Main topics:
- ZK: Groth16, Plonk, ZK rollup, zkEVM
- Uniswap V3
- Fuzzing and Invariant Testing
- Novel bug bounty report and hack incidents
- Rust, Substrate, Solana
6
0
121
1
1
28
When reading this article on create2 by
@ProgrammerSmart
: , I found a subtle detail that I did not realize: if the constructor contains input parameters, you should take that into account when computing the address:
1
3
27
Today is the last of this research week series. Over the past two weeks, I implemented Groth16 from scratch, played with basic Circom a bit, learned more math background for zk by leading moonmath study group at ZK Hack.
Will get back to auditing starting tomorrow🫡
Research week day 10 done.
Got my Groth16 code working until alpha and beta. Just need to blend in gamma and delta tomorrow and I am done.
Spent many hours debugging subtle math details today...It was kind of a frustrating experience but I am happy to see the code working now.
0
0
15
4
0
28
Work hard, play hard -> play Turing Complete after work😂
3
0
24
Yesterday I saw a question asked in
@opensensepw
discord server. The Yul code basically just stores some string in memory. The question is why is it 3-part: 0x20 + length + ASCII. In particular, what does the 0x20 do.
4
3
21
@Jeyffre
I used to be ashamed by treating things like blackbox back in school, but now I realize it is a wisdom: you can progress faster and come back to things you don’t fully understand later.
2
0
21
If you know linear algebra, it is possible to bring your lattice knowledge to a decent level within just a week. The beauty of lattice is that it solves problems that seem to be irrelevant. A famous example is you can break RSA with lattice, although RSA does not use lattice.
2
0
19
I am about to start a weekly practice audit wargame in this repo. I will pick small codebases (<500 LOC) from either Code4rena or Sherlock. Participants should audit the code without looking at the report, and compare their findings with the report once
1
3
20
Research week day 7 done. Today I am invited to an auditing gig, so I only spent 2-3 hours researching.
The topic for today is "transient storage".
Research week day 6 done. Yesterday I had an auditing gig so skipped one day. Today I am back.
Today I researched (fundamental) complexity theory for the entire day. I have learned it in college but still having some knowledge gaps, so I dived deeper.
2
0
13
2
0
20
Reading list for January 19th, 2024:
1.
2.
3.
Yesterday's complete hack of Wise Lending was far more complex than reported. Very worth examining.
The protocol had added explicit defenses against this style of attack, which the attack then either bypassed or used against the protocol. 🧵 1/21
21
99
522
2
1
20
Came across a novel attack vector on Pyth oracle on solodit:
Look at that endless argument in escalation phase lol
Solodit
Solodit is a platform that aggregates all findings from popular audit platforms.
solodit.xyz
0
1
19
Elliptic Curves reading list Part 3:
Another beginner-friendly read on ECC is "Modern Cryptography and Elliptic Curves" by Shemanske. This is a short book that gives you solid foundation for mathematical cryptography.
1
2
19
Learned about an exploit that uses LLL to attack random number generator in minecraft in
@CryptoHack__
discord server...Omg this blew my mind
0
2
18
Reading list for January 31st, 2024:
1.
2.
3.
🧵Understanding Voting Escrows
Voting Escrows are probably one of my favourite contracts and oddly enough there's almost always multiple issues within them.
What exactly are they? To put it simply - users lock some of their funds for a period of time. They in return receive a
12
31
251
2
3
18
😈Did you realize building logical gates is similar to writing circom? They both require very little technical background but you need to be smart to come up with a solution.
1
0
17
Thank you
@_RastaMouse
for the excellent course and exam! Look forward to taking CRTO II with you when it comes out.
2
2
16
@andyfeili
It might sound funny but one of the reasons I got into web3 (other than money) is I thought looking for logic bugs in code can increase one’s intelligence. I don’t know if that is true though😅
3
0
16
Research week day 5 done.
Today I learned some zk and did research on uniswap v3.
Research week day 4 done.
Today I started with ZK MOOC lecture 1, 2, and 12:
Lecture 1:
Lecture 2:
Lecture 12:
Lecture 1 and 2 were a review for me, lecture 12 is brand new knowledge.
2
0
39
1
0
16
Research week day 10 done.
Got my Groth16 code working until alpha and beta. Just need to blend in gamma and delta tomorrow and I am done.
Spent many hours debugging subtle math details today...It was kind of a frustrating experience but I am happy to see the code working now.
Research week day 9 done. Today, groth16. Tomorrow, groth16. Lol
1
0
8
0
0
15
Good work team! Wow we must be missing some findings compared to the top guys. Let’s do a reflection session when the report comes out
@deliriusz_eth
@lopotras
@_savi0ur
3
1
14
To all ret2wargames participants, this week's homework assignment is the Secureum AMAZEX DSS Paris CTF. Solve as many challs as you can, and we will pick an interesting one for Sunday's live event. I will be live coding PoC, should be a lot of fun.
0
2
14
QuillCTF maintained by
@Quill_Academy
@QuillAudits
is an amazing resource for practicing your PoC writing skills. The challenge "MetaToken" is going to be retired soon and we will live coding its PoC on Sunday ret2wargames week 3 event at
@opensensepw
.
0
3
14
Research week day 3 done.
I recall Tim Becker gave this advice for learning zk:
I still don't know a few topics from this list, so I did some research.
Research week day 2 done. Today is another zk day, need to catch up uniswap v3 tomorrow lol.
First thing I did today is reading this:
It explains some commonly-used zk terms in "succinct" way, which I find very helpful.
2
2
31
1
0
14
A standard definition of quotient group G/N is that it contains all cosets of N in G, but that's not helpful for understanding this concept.
Informally, it is better to think of G/N as "factor out N from G", so that some unwanted traits are thrown away.
Sharing a few resources for understanding quotient groups:
1.
2.
3.
4.
5.
6.
7.
Go over them in this order.
0
3
37
1
1
14
1
0
13
Research week day 6 done. Yesterday I had an auditing gig so skipped one day. Today I am back.
Today I researched (fundamental) complexity theory for the entire day. I have learned it in college but still having some knowledge gaps, so I dived deeper.
Research week day 5 done.
Today I learned some zk and did research on uniswap v3.
1
0
16
2
0
13
@0xkato
A good example for rounding issue is the “inflation attack”. In that scenario user’s share number could round to 0 from 0.999999…, causing significant loss.
1
0
11
Sharing my 2 wei on this take. You would notice that engineering problem oftentimes reduces to a small detail, such as playing with data structure and numbers. This is what some DSA questions try to train you. Bullish on leetcode! (lol
A note to anyone who wanted to get into web3 because they couldn't be bothered to reverse a linked list or solve the knapsack problem.
I reduced the constraints to one of my circuits by 1/4th the original size using dynamic programming (memoisation).
Since ZK is nothing but
11
12
104
0
0
12
@TheSecureum
RACE
#20
( designed by
@_hrkrshnn
) question 5 taught me one thing: "return" in Solidity and "return" in Yul behave differently. I wrote a demo contract:
2
0
13
@woshilalala
3 -> because he is a “big name” or he spent countless hours arguing with strangers on the internet😈
1
0
12
@saxenism
Last year I passed 5 interviews at a company and got rejected by HR in the end, saying I don’t have enough YoE on resume😂
1
1
12
Research week day 8 done. Today I worked on a few nerdy stuff...mainly zk.
First thing, I was a bit confused by the cyclicity of elliptic curves over finite field, so I did a bit research.
Research week day 7 done. Today I am invited to an auditing gig, so I only spent 2-3 hours researching.
The topic for today is "transient storage".
2
0
20
1
0
11
😍Studying this
The
@hydra_dx
report has now been published 📓
🚨 1 High-risk finding
⚠️ 10 Medium-risk findings
💻 27 Wardens contributing
Read the full report here:
3
3
45
0
0
11
Thanks for thr shout out! We will be doing some crazy stuff like speedrunning through RACEs and Paradigm CTF prep, hope you guys enjoy it.
An amazing event "ret2wargames" will be taking place in the upcoming weeks on the
@opensensepw
Discord server, starting from this Sunday.😈
@ret2basic
will be hosting it, and he has done an incredible job.🫡
I believe you will learn a lot if you participate.✅
2
1
14
2
2
9
Tips for those who are learning abstract algebra for ZK:
You can skip hard proofs. Understanding a theorem and proving a theorem are different - understanding is conceptual and proving is technical. Once you are more mature in math you can always come back for the hard proofs.
0
0
9
Public good by
@hackthedefi
is getting more exposure 🧐
Using
#ityfuzz
has never been easier.
I'll be releasing a series of videos/articles analyzing common vulnerabilities, putting this tool to the test in various scenarios to showcase its capabilities.
5
5
24
1
0
10
Can I have an invite code? My cantina account is linked to a lost email address and I can't update it. Need to create a new account.
4
0
9
@saxenism
<-- is not constraint so you can generate a fake proof with inter == 1 but input != 0?
1
0
10
😅2021 vibe… Bull market again for sure
🥉won $18,274.25 with 1 unique medium: incompatibility with fee-on-transfer & rebasing tokens.
Very basic finding normally with tons of duplicates but with audit demand so high there are less eyes on every contest.
Great time for auditors - if you want it, go get it!
18
3
164
0
0
10
Lfg!
🔥We are glad to announce that DeFiHackLabs has received sponsorship from Security Alliance
@_SEAL_Org
founded by Paradigm's head of security
@samczsun
.
👇Learn more about our vision and mission.
#web3sec
#DeFiHackLabs
#SecurityAlliance
#SEAL911
8
8
56
0
0
9