🐸Smart🐸Contract🐸Programmer🐸

@merkleplant_eth Agree Clever tricks (Jacobian + ecrecover) used in the oracle to make EC addition cheap are nice and educational github.com/chronicleproto… #L95-L96" target="_blank" rel="nofollow noopener">github.com/chronicleproto…

@ProgrammerSmart Feel free to reach out if you have questions 🤝 It's a quite beautiful scheme to implement in EVM

Schnorr signature scheme - Uses Elliptic curve math (similar to ECDSA) - A signature can easily be turned into multi-sig - Multi-sig can be vulnerable to rogue key attack - Used by Chronicle Labs price oracles cantina.xyz/bounties/5240b…

Math of WstETH stETH is rebasing WstETH is not how does WstETH accounting work? X = _getShareRateNumerator()) / _getShareRateDenominator() Notes github.com/t4sk/notes/blo… WstETH #code" target="_blank" rel="nofollow noopener">etherscan.io/address/0x7f39… stETH #code" target="_blank" rel="nofollow noopener">etherscan.io/address/0xae7a…

@Sabercodes123 Always been around

@ProgrammerSmart where have you been?

In addition to our Technical Account Manager role, we’re also hiring a Business Development & Growth Manager. More details below

🛡️ Looking for part-time audit engagements — hire me. I'm InfiniteSec, an independent security researcher focused on L1/L2 and smart contract security. Available for private audits, contest support, or ongoing part-time engagements. Track record: • HackenProof: #4 all-time, $500k+ in bounties • Immunefi: $70k+ this year • Cantina: $60k+ this year • Ethereum: Top 10 on the consensus-layer bounty leaderboard • TON: multiple high-severity bugs, credited in official releases • Filecoin: #12 all-time github.com/link-infsec DMs open 👇 — reach out if your team needs an extra pair of eyes.

On 11th of July Bonzo Lend (@bonzo_finance) got hacked for 9M The attacker deposited 3$ of collateral and walked out with $9M, without forging a single signature. Here is how 🧵 1⃣ Project summary Bonzo Lend is Hedera's (@hedera) largest lender. It reads asset prices from Supra's oracle. Every price Supra writes on-chain is supposed to carry a valid BLS signature from its committee, and the feed contract verifies that signature before storing the price. That check is the only thing standing between "a price" and "the price". 2⃣ The bug Wallet A submitted a price update where the BLS signature field was [0,0]. A zeroed signature. No real committee ever signs a zero. To verify a BLS signature you run a pairing check, roughly `e(signature, G) == e(H(message), pubkey)`. Supra's verifier built that check and handed it to Hedera's alt_bn128 pairing precompile (system contract 0.0.8). The problem: both the submitted signature AND the referenced committee public key were the point at infinity (zero). Pair anything with the identity and you get the identity back, so the equation held trivially and the precompile returned 1 (true). Under EIP-197 that is the correct answer for that input. The precompile did its job. The verifier did not. 3⃣ The attack path 1. Deposit 250 SAUCE (worth ~$3) into Bonzo Lend as collateral. 2. Push a price update to Supra's pull oracle with a [0,0] signature. The raw price field was 1 followed by 30 zeros, roughly 12 orders of magnitude above SAUCE's real ~0.2 HBAR. 3. The verifier accepts the blank signature and the fake price is written on-chain. 4. 8 seconds later, borrow against the now absurdly valuable collateral: - 6,634,528.20 USDC - 34,518,389.36 WHBAR ~$9.05M total. 5. Swap the loot into WETH and WBTC and bridge ~$5.25M to Ethereum via LayerZero (per PeckShield: ~2.36K ETH and ~15.58 WBTC). No flash loan. None needed. Write the price in one tx, borrow against it in the next.

After 5months +, i got a reply under my tweet and now under the @dopplerprotocol report. TRIAGED->ACKNOWLEGED->REJECTED Like just forget bout it man… Also I wonder who budkayo is 😂. LESSON LEARNT! 😂 You shouldn’t have moved to another chain 😂

@josephdelong I don't know the exact mechanics of signature verification for ETH nodes. But I presume that nonce is part of the message that you are signing. Therefore if the nonce changes then so does the message.

@ProgrammerSmart So every time someone bumped their nonce on a slow transaction with Metamask they exposed their private key!?

Why reusing nonce when signing 2 different messages in ECDSA exposes the private key Code github.com/t4sk/notes/blo…

@ProgrammerSmart Yep! We built a level in Ethernaut to learn that issue: ethernaut.openzeppelin.com/level/37

@wen21447219 It's handled by wallets and smart contracts. For smart contracts, messages are typically enforced to be unique by nonces stored in the smart contract

@ProgrammerSmart 面对这种可能性的威胁，普通用户的最佳实践是什么

Found a bug in @NibiruChain and they are posting me in a branch product. I found and reported a serious chain halt bug in nibiru, which they fixed, then they claimed it was a cosmos bug and thus not going to pay for it, I have never seen a more pathetic excuse than this: github.com/NibiruChain/ni…

I also found and reported a bug last week that would have compromised the entirety of all funds on @NibiruChain. While they have read the report and since fixed the bug, they haven't done so much as respond to a single message of mine -- not even the report itself.

@0xaldric I would either - disallow swaps by unauthorized accounts - or have the oracle revert when price is abnormally volatile

@ProgrammerSmart even with a chainlink wrapper, the heartbeat/deviation gap is where a fast move slips through

Dollar cost average vault Sell token = X Buy token = Y - User deposits X - X earns yield from external DeFi - X can be swapped to Y, rate limited by time and amount - Oracle checks swap price Code (not tested) github.com/t4sk/notes/blo… Math based on Liquity stability pool

@0xTommyGenesis Thanks, will fix

@ProgrammerSmart allow() and deny() functions are public and unguarded

@Hiraweb3 It can be a wrapper around chain link oracle

@ProgrammerSmart love the yield hack, but how's the oracle secured?

This Security Researcher has earned $1,764,402 on Immunefi. $519,991 in 2026 alone (so far). Now @__nnez is coming on The Immunefi Show to break down his hunting process, how he chooses targets, and how to use AI to actually find bugs. What should we ask him?