Permeabull

@Leo_Glisic @ChrisBlec @jonwu_ How can we be sure that “valid state transition” implies that the funds match the expected amount? If someone withdraws from the L2, but all the details are private, it seems hard to do a comparison of funds.

@ChrisBlec @jonwu_ The ZK proofs are visible on chain and anyone can verify them. Each proof is only valid if each state transition is valid (meaning the funds match), while the proofs keep the other information private. In other words, the pudding is in the proofs.

Aztec is a privacy-first Layer 2 on Ethereum. Sounds nice, but "privacy" implies more than just obfuscation: Aztec's design actually turns Ethereum completely on its head. So here's what private execution actually means and implies in <5 minutes:

@EthDotId @divinityglobal Can’t wait! permeabull.me.eth.id

🇫🇷🍾🔥 LAST MINUTE TICKETS DIVINITY x ETH ID UNDERGROUND RAVE @ EthCC 🇫🇷🍾🔥🕺💃 Tuesday July 18, 9 pm - 2 am, Le Duplex Paris 🔥 Hosting with the incredible @divinityglobal 🍾 We spared no expense booking the most epic venue 🇫🇷 An UNDERGROUND three-story club next to Arc de Triomphe 🥃 OPEN BAR UNTIL TAPPED - get lit and dance the night away 🕺💃 GET YOUR RAVE ON 🕺💃 TO GET YOUR TICKET: 1. Follow @EthDotId, like and RT this tweet 2. Download app apps.apple.com/us/app/eth-id/…, grab your free domain 3. Customize your profile, reply with link in this thread 4. If your profile looks legendary, you'll get a DM. MUST REGISTER THROUGH APP LFG - DM'S ON - FOLLOW @EthDotId TO GET DM

@cryptonextphase @hedgedhog7 Can you explain plz

@hedgedhog7 Imagine Dharma investors

@0xvangrim Thanks for sharing!

@0xOwenThurm I just watched some of your vids on my 8 hour flight

When you have an 8 hour flight ahead but the grind don’t stop. 👀😌

@PopPunkOnChain Gas bad. Me in chat good.

i’m going to make a very exclusive group chat where we talk about gas optimization. i’ll post random tips, cool contracts/solidity patterns i find, and inefficient smart contracts that aren’t worthy of a pop punk tweet. it’s basically OnlyFans for optimizers. Who wants in?

@thismatbf @kristofgazso Whoa

@kristofgazso npm update ethers

I am going to punch through a wall please explain

@gogotheauditor Link to referenced thread please?

@KoolexC Congrats!

Happy to contribute to this! Found 4 high issues (one solo) where one or two I actually classified as a medium severity but seems to be upgraded by the judge. Congrats to everyone!

@bytes032 Where do you grab reports from? How much time do you spend reviewing the code before/during reading the report?

The top hack for newbie auditors? Just read reports. Here's the strategy that kicked off for me: • Read reports in the morning • Participate in contests in the afternoon • Double espresso + 3h focus on one each, decided & outlined the night before. Works like a charm

@drakeevans @danrobinson Won’t these have the same result? Lose 10% = multiply by .9; gain 10% = multiply by 1.1. The combo = multiply by .99, regardless of order.

@danrobinson Before I get to the math you probably have some intuition about this because you know losing 10% and gaining 10% will leave you with something different than gaining 10% and losing 10%.

Suppose you have a constant product market maker between ETH and USD, with zero fees. There are two trades about to be executed on it—a sell of some amount of ETH, and a sell of some amount of USD. Does the final price depend on the order in which those two trades are executed?

@apoorvlathey What would happen here if the contract created with CREATE were not self destructed? How would the re-deployed Deployer contract with a reset nonce be able to deploy anything with CREATE again since the destination address is occupied?

@0xngmi How did a call from the governance contract to some other contract result in giving full control of the DAO?

so hacker got voters to vote a proposal, and, after the proposal passed, they changed the code for it and executed their malicious proposal, giving themselves full control of the DAO and draining the tokens held there

tldr of tornado governance hack: 1. hacker makes a proposal that executes code from a contract 2. users vote for the proposal since contract code looks good, proposal passes 3. hacker self-destructs contract and deploys malicious one in same address 4. 2nd contract is executed

@moo9000 Had these people previously rugged? If not, how could Certik have known they were fraudsters? What more should they do besides identify centralization risks in the report? How would they know of those risks before performing the audit?

CertiK chose again to audit a project for criminals and fraudters. As a audit company, CertiK is free to choose who they do business with. CertiK made a deliberate business decision to approve another rug pull.

@cheerfulpaige @billlangel @rawscientist How does this linked thread indicate that he tries to meet women in parking lots? He’s trying to have and encourage compassion for the homeless. You can disagree with him, and think the woman’s safety takes priority. But he’s not the one being “randomly argumentative” here.

If someone has a good protein bar recipe with good macros - don’t be afraid to share it.

@jeremyongws @UNkown363636 @WinterSoldierxz @CurveFinance @ethereum Why would you assume that?

@UNkown363636 @WinterSoldierxz @CurveFinance @ethereum I know, I’m assuming people reading this thread already knows.

1/ @CurveFinance secretly shipped TriCrypto-Token pool on @ethereum mainnet yesterday. This move is set to take Curve's composability & capital efficiency to the next level. How will this impact the Curve ecosystem and your $CRV & $CVX bags? A short 🧵👇

@HodlnautHodl @DefiPunk That doesn’t make your statement about “yields not paid from new issuance” true

@0xCygaar Why mint over safemint?

Additionally: - Should just use a uint256 instead of a counter - _mint over _safeMint - unchecked block for the iterator increment

Saw this mint loop function in an NFT contract recently. This is a great example of how to not write your mint code🤦‍♂️:

@angelstarmon @0xCygaar Doesn’t need to be unchecked block, but it safely can be since we know it won’t get big enough to potentially overflow. The overflow guards implicit in 0.8 cost gas that you don’t need to spend here.

@0xCygaar Can I have 2 questions please? (1) Why is _mint preferred over _safeMint? (2) Why does the i++ needs to be in an unchecked block if contract is already using v0.8 and above which won’t have overflow issues?