Naoki Yoshida (@meditationduck) 's Twitter Profile
Naoki Yoshida

@meditationduck

meditationduck.eth/Nový svět
SecHack365 '19/SecCamp '20/FIT CTU/Solidity auditor at @AckeeBlockchain

ID: 1096620579799494657

calendar_today16-02-2019 04:01:35

140 Tweet

751 Followers

977 Following

Cardene【かるでね】🦔 (@cardene777) 's Twitter Profile Photo

📚ERC7579 ERC4337を拡張して、各機能をモジュール化する提案である『ERC7579』についてZenn Booksにまとめました! zenn.dev/heku/books/8a7…

Ackee Blockchain Security (@ackeeblockchain) 's Twitter Profile Photo

The longer it takes to fix a bug, the more likely it gets exploited. Many developers will waste hours re-running failed fuzz tests with redundant logging just to understand what went wrong. There's a better way.

chrisdior.eth (@chrisdior777) 's Twitter Profile Photo

Its called "The Web3 Auditor Lifestyle" - caffeine overdose - ignore sunlight and touching grass - same hoodies from 4 years ago - find lots of bugs - tons of money earned Repeat

Its called

"The Web3 Auditor Lifestyle"

- caffeine overdose
- ignore sunlight and touching grass
- same hoodies from 4 years ago
- find lots of bugs
- tons of money earned

Repeat
Naoki Yoshida (@meditationduck) 's Twitter Profile Photo

Proper differential testing catches bugs others missed — even subtle ones like front-running. It gives multiple views on the smart contract logic.

FORKFORK DOG (@forkforkdog) 's Twitter Profile Photo

what's not important in fuzzing: coverage, handlers, echidna, asserts, cheatcodes, medusa, failures, states, invariants, preconditions, calls, and state capture what's important: the sequence of calls that puts your protocol out of business

what's not important in fuzzing:
coverage, handlers, echidna, asserts, cheatcodes, medusa, failures, states, invariants, preconditions, calls, and state capture

what's important:
the sequence of calls that puts your protocol out of business
WHHQ (@wakehacker_hq) 's Twitter Profile Photo

Security is about to become autonomous with wakehacker Rolling out in the coming weeks: – New feature drops – Major announcements – Community contests The future of smart contract security is here Join our Discord for more updates → discord.com/invite/5tSGWvR…

Security is about to become autonomous with <a href="/wakehacker_ai/">wakehacker</a>

Rolling out in the coming weeks:

– New feature drops
– Major announcements
– Community contests

The future of smart contract security is here

Join our Discord for more updates → discord.com/invite/5tSGWvR…
Naoki Yoshida (@meditationduck) 's Twitter Profile Photo

リエントランシー攻撃の例です。 すべてのタイプをカバーしています。 Wakeで実際に動かしてみることができます! github.com/Ackee-Blockcha…

Arbitrum Developers (@arbitrumdevs) 's Twitter Profile Photo

Security on @Arbitrum just got to a whole other level! After 30+ audit firms applied and underwent a rigorous evaluation process, we’re excited to share the final list of top-tier auditors selected for the Arbitrum Audit Program.

Security on @Arbitrum just got to a whole other level!

After 30+ audit firms applied and underwent a rigorous evaluation process, we’re excited to share the final list of top-tier auditors selected for the Arbitrum Audit Program.
Naoki Yoshida (@meditationduck) 's Twitter Profile Photo

リエントランシー攻撃。外部呼び出しがある場合にはすべてのタイプのリエントランシーに当てはめてロジックを分析する必要があります。面白いコールトレースです。

リエントランシー攻撃。外部呼び出しがある場合にはすべてのタイプのリエントランシーに当てはめてロジックを分析する必要があります。面白いコールトレースです。
Naoki Yoshida (@meditationduck) 's Twitter Profile Photo

Article about reentrancy attacks again. This time, it's about the reentrancy vulnerability in ERC721. Once you use an integration or library, the responsibility is on you. Be aware of external calls, and follow best practices with understanding. #Ethereum #Solidity #Web3Security