Chainlink Oracle DeFi Attacks
Integrating with Chainlink involves unique security considerations that can result in exploitable vulnerabilities..
Command Palette
Search for a command to run...
Comments
Join the discussionNo comments yet. Be the first to comment.
Deep Dives
Part 12 of 20
Deep dives on vulnerability classes exploited in real-world smart contract attacks
Exploiting Precision Loss via Fuzz Testing
Fuzz testing is an invaluable tool for finding & maximizing precision loss vulnerabilities..
More from this blog
Using Claude To Evolve Specialist AI Smart Contract Auditors
In recent times a number of web3 security companies have begun offering paid “AI Smart Contract Auditor” services. These services commonly require clients to upload code to a website and after paying a fee, receive an AI-generated audit report. A muc...
Jul 4, 20257 min read
The Yieldoor Gas Optimizoor
Learn to write gas-efficient Solidity code using a real-world example!
Mar 17, 202515 min read
DeFi Liquidation Vulnerabilities
Liquidation code can contain subtle bugs and vulnerabilities..
Jan 23, 202528 min read
Find Highs Before External Auditors Using Certora Formal Verification
At DeFi Security Summit 2024 I presented a workshop on how smart contract developers can use invariant fuzz testing to find high severity issues prior to external audit, based on my real-world experience doing private audits with Cyfrin. Since fuzz t...
Nov 29, 202426 min read
Find Highs Before External Auditors Using Invariant Fuzz Testing
Many high severity findings found during private audits by external auditors could have been found by the protocol developers themselves using invariant fuzz testing prior to engaging external auditors. While this doesn’t require developing an “attac...
Nov 10, 202414 min read