Today we release an inspirational talk by tincho 🪷 who pulls from previous experiences, best practices, and ethereum culture to dive deep into the spirit of security auditing + ecosystem safety. Enjoy! youtu.be/3wwOb1HO20w

Want some security alpha for powering through my world cup tweets anon? Check this out 👇 theauditorbook.com What is it you ask? A compilation of high and medium-severity findings from Code4rena & Sherlock compiled by @agfviggiano 🐐

Dear breakers of DeFi, today is a good day. A new version of Damn Vulnerable DeFi is out ! damnvulnerabledefi.xyz/v3-release What's included ?

There is one Solidity feature that goes virtually unnoticed in the land of auditing. This feature is possibly the MOST underrated feature in Solidity. Let's learn everything about it in this thread 👇 🧵

⚒️ Foundry Feature Alert Introducing `forge doc`

Bet you didn't know slither can automatically generate invariants to fuzz! In this thread I break down 3 insanely valuable slither features that few know about. 🧵

1/ Ethereum has over 290 MILLION lines of smart contract code 🦇🔊 and it's VERY HARD to search that codebase! Today Gary and I are launching V1 of codeslaw.app as a public good to help developers easily find and learn from battle-tested code. Example queries👇

Hey #BUIDLers, need a quick testnet and need it fast? Jump to development and testing with Tenderly Forks! ✅ 10 unlocked accounts funded with 100 ETH each ✅ Team-sharable JSON-RPC URL ✅ Complete & fast TX execution ✅ Tenderly Debugger available out of the box

As smart contract security evolves, property-based fuzzing has become a go-to technique for developers and security engineers. To help the community define properties, we are releasing a set of 168 pre-built properties that can be used to guide Echidna. blog.trailofbits.com/2023/02/27/reu…

The new Echidna release allows testing against on-chain state instead of having to set everything up yourself. This should open up a lot of avenues for security researchers to test against deployed contracts github.com/crytic/echidna…

After two days of relentless hacking and countless cups of coffee later, it's finally a wrap for Paradigm CTF 2023. Result Rundown: - We tackled 14 of the 17 demanding challenges presented, and all cryptography and pwning questions were completed. The Solana question eluded us,

Today we’re releasing weAudit, the VSCode extension we use during secure code reviews to collaboratively take notes and highlight code regions. blog.trailofbits.com/2024/03/19/rea…

Dear players of Damn Vulnerable DeFi, rumours are true. The most vulnerable smart contracts in all web3 have been upgraded. V4 is out! 🔥 This is a major update to the game, packed with new challenges and improvements all around. damnvulnerabledefi.xyz/v4-release/

Nice post on software engineering. "Cognitive load is what matters" minds.md/zakirullin/cog… Probably the most true, least practiced viewpoint.

We have to take the LLMs to school. When you open any textbook, you'll see three major types of information: 1. Background information / exposition. The meat of the textbook that explains concepts. As you attend over it, your brain is training on that data. This is equivalent

x.com/i/article/1886…

Reminder guys: now with PECTRA ethereum upgrade, you only need to sign a message to get completely drained! Before, you actually had to sign the TX. Be very careful of what you sign now - even an offchain message!

1/10 William Cheung Σ: says wait, but I can't. Can't wait. We are builting an Ethereum debugger with 1) true source-level stepping, 2) near-100% local/state variable inspection, and 3) on-the-fly Solidity expression eval at any step. Screenshots below; details in the thread.

Foundry has a new release candidate: v1.4.0-rc3! Highlights include: backtraces, configuration inheritance & multi-chain configuration, forge fmt powered by Solar🌞, enhanced coverage guided fuzzing, custom precompiles & many performance improvements! $ foundryup -i v1.4.0-rc3

I've been working on something: Slippy, a modern and flexible linter for Solidity. github.com/fvictorio/slip…