Tech Byte™

https://github.com/DeFiFoFum/ApetasticERC20Factory/blob/main/contracts/ApetasticERC20Factory.sol Read this smart contract code and try to understand.

https://dev.to/rushanksavant/delegate-call-order-of-variables-4k3 Interesting.

https://eip2535diamonds.substack.com/p/understanding-delegatecall-and-how?s=r Helpful article about delegatecall in solidity.

https://chat.openai.com/ It's the cool gift that 2021 have gave us ,when we were about to leave the year behind. 2021, rest in the almighty peace. chatgpt helps on explaining questions on simple terms with examples. it should help on your learning curve!

The Dedaub team has disclosed a Critical vulnerability to the Uniswap team! Funds are safe - Uniswap addressed the issue and redeployed the Universal Router smart contracts on all its chains 👏 The vulnerability allows re-entertrancy to drain the user's funds, mid-tx. #Uniswap recently introduced the Universal Router. It unifies ERC20 and NFT swapping into a single swap router. Users can perform heterogenous actions, e.g., swapping multiple tokens and NFTs in one tx. This router embeds a scripting language for all sorts of token actions. Such commands could include transfers to third party (potentially untrusted) recipients. In a correct implementation, such a transfer should send to the recipient only what the call parameters specify. And nothing more. However, if third-party code is invoked at any point in the transfer (which manifests itself due to composition of protocols), the code can reenter the UniversalRouter and claim any tokens temporarily in the contract. · One part of the PoC was implemented below. The attacker also needs to implement code to reenter the router (calling execute) and sweep all token amounts. The router may contain funds mid-transaction due to other actions and transfers in a complex swap... Image E.g., 1) transfer an NFT 2) transfer the remaining funds. The receipient of the NFT can easily reenter UniversalRouter (between steps 1 & 2) by calling transfer or sweep inside its onERC721Received handler and drain the entire amount! We advised the Uniswap team to add a reentrancy lock to the core execution of the new router, and redeploy. This modification was swiftly implemented, fixing the issue before the router gaining mass adoption: https://library.dedaub.com/contracts/Ethereum/0xef1c6e67703c7bd7107eed8303fbe6ec2554bf6b/source?line=2787 Dedaub @dedaub · Jan 2 We thank the @Uniswap team for awarding a bug bounty. Further reading: media.dedaub.com Uniswap Bug Bounty By the Dedaub team source : Dedaub

Which web3 project's vulnerable code was this? 1. Cosmos (0 / 0) – 0.00% 2. Bored Ape (0 / 0) – 0.00% 3. Reimagined Finance (0 / 0) – 0.00% 4. Olympus DAO (0 / 0) – 0.00% Last updated: 2023-01-04 09:45:39 EET

መገናኛ ቀናችን ቅዳሜ ይሁን ወይስ እሁድ? 1. ቅዳሜ (1 / 5) – 20.00% nige24 2. እሁድ (4 / 5) – 80.00% Selam, usra4ever, Anonyguy, Birtukahn Jesus Last updated: 2023-01-04 09:45:39 EET

Hello is there anyone has writerbay, writershark account? Or any other writer accounts? Please inbox me @intelon

Defrost finance exploited

update any Chromium browsers (Chrome, Brave, etc) NOW https://www.forbes.com/sites/daveywinder/2022/03/26/google-confirms-emergency-security-update-for-32-billion-chrome-users-attacks-underway Old but important info

Summary: Jabber/ XMPP Is a secure messaging protocol with many advantages in addition to many features in the cryptography domain. Although it's not as popular, it's still being actively maintained and utilized. Cryptography: It uses End-to-End signing to ensure that both parties receive the validated message sent/ recv. to ensure it hasn't been compromised through various interception techniques such as over-the-wire packet interception or other attacks such as SSL stripping, etc. A massive feature is OTR (Off-the-Record) protocol. It's data is hashed with a combination of encryption such as the Diffie-Hellman and SHA-1 hash. In addition, it requires both parties to utilize at once instead of the basic XMPP/ Jabber client. Highly advised in sensitive situations. Resources: - (1) https://www.jabber.de/was-ist-jabber/ -- "What is Jabber/ XMPP" - (2) https://xmpp.org/getting-started/ -- "How to setup Jabber/ XMPP" - (3) https://wiki.xmpp.org/web/OTR#:~:text=Off%2Dthe%2DRecord%20Messaging%2C,the%20SHA%2D1%20hash%20function. Notes: - There isn't just one server to utilize. There are plenty out there. Lastly, it's not up to the server but to you to secure your communications as the client. If you need assistance, feel free to tag or PM me. author:cosmo

Smart contract auditing.