NEW BOT Телеграм, страница

1️⃣2️⃣ #ETHERNAUT #level_12 #Privacy

you can access the private variables using cast :

cast storage $CHALLENGE_CONTRACT_ADDRESS 5 --rpc-url $RPC_URL

🥷🍷 <Happy Hacking/>

180 viewsKian, 21:09

KS note

🔑 Smart Contract Obfuscation Techniques

1️⃣ https://titan.csit.rmit.edu.au/~e13322/hai_dong/papers/Bian_TSE2022.pdf
2️⃣ https://www.mecs-press.org/ijmsc/ijmsc-v8-n3/IJMSC-V8-N3-3.pdf
3️⃣ https://degatchi.com/articles/smart-contract-obfuscation/

🔥2

191 viewsKian, edited 21:30

KS note

📦 Transient Storage

1️⃣ https://hackernoon.com/transient-storage-ethereums-game-changing-feature
2️⃣ https://etherworld.co/2022/12/13/transient-storage-for-beginners/
3️⃣ https://soliditylang.org/blog/2024/01/26/transient-storage/
4️⃣ https://youtu.be/0-hiB5I39Mk?si=-0qy3ZeiuW_L9D8p
5️⃣ https://solidity-by-example.org/transient-storage/
6️⃣ https://www.evm.codes/#5c?fork=cancun

Hackernoon

Transient Storage: Ethereum's Game-Changing Feature

Explore Transient Storage in Ethereum: a game-changer reducing transaction costs and enhancing operations. Discover its mechanism, significance, and use cases.

188 viewsKian, 21:33

KS note

🧩 Function's Correct order

[public/external/internal/private] [view/pure/none] [payable|OPTIONAL] [virtual|OPTIONAL] [override|OPTIONAL] [customModifier|OPTIONAL] [returns|OPTIONAL]

181 viewsKian, edited 06:20

KS note

🔎 Decode The `msg.data`

⁉️ Why msg.data[4:] => Because the first 4-byte of data is function signature

// SPDX-License-Identifier: MIT
pragma solidity 0.8.20;

contract Decode {
    function run(
        string memory _i1,
        address _i2,
        uint256 _i3,
        bool _i4
    ) public pure returns (
        string memory,
        address,
        uint256,
        bool
    ) {
        return abi.decode(
            msg.data[4:],
            (string,address,uint256,bool)
        );
    }
}

222 viewsKian, 21:16

KS note

⚒ Best Smart Contract Development Toolkits ( i think )

1️⃣ Foundry
- 🐈‍⬛ https://github.com/foundry-rs/foundry
- 📚 https://book.getfoundry.sh/

2️⃣ Hardhat
- 🐈‍⬛ https://github.com/NomicFoundation/hardhat
- 📚 https://hardhat.org/hardhat-runner/docs/getting-started

GitHub

GitHub - foundry-rs/foundry: Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written…

Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust. - foundry-rs/foundry

240 viewsKian, 21:30

KS note

Blockchain Engineering Playbook 2024.pdf

4 MB

266 viewsKian, 21:33

KS note

📖 Mastering Ethereum Book - Online

https://cypherpunks-core.github.io/ethereumbook/

220 viewsKian, edited 21:34

KS note

🤖 useful AI

1️⃣ Phind : https://www.phind.com
2️⃣ ChatGPT : https://chatgpt.com/
3️⃣ ChainGPT : https://app.chaingpt.org/

ChatGPT

ChatGPT helps you get answers, find inspiration, and be more productive.

206 viewsKian, 08:39

KS note

https://twitter.com/MostPow3rful/status/1785047450400497870

X (formerly Twitter)

Kian Shahi (@MostPow3rful) on X

💻 Completed 2 Course "Blockchain Basics" & "Solidity 101"
🍷 Thanks @CyfrinUpdraft @PatrickAlphaC
🤠 Let's go for intermediate/advanced Courses

233 viewsKian, 08:46

KS note

started with solidity, played CTF/Challenge(s) such as HTB & Ethernaut (playing until death 🫡), Learned many things and at this point, i want to start Auditing on the past CodeHawks's First Flights 🦅✈️ and i want to write report at the specified time, then want to check other auditor's submission and compare with myself. hope to learn many things 🥷

🍷 Enjoy The Road

214 viewsKian, edited 11:50

KS note

🦅✈️ First Flight 1️⃣
https://www.codehawks.com/contests/clnuo221v0001l50aomgo4nyn

🔴 [HIGH-0] user can access the value of s_password and s_owner variables beacuse of the storage layout. we can get the value and decode them.

cast storage $CONTRACT_ADDRESS 0 # s_owner
cast storage $CONTRACT_ADDRESS 1 # s_password

🔴 [HIGH-1] there is not any limit on setPassword() function. user can access the setPassword() function without any limit and can change the value of s_password;

⚪️ [INFO-0] should declare errors out of the contract ( make them global )
⚪️ [INFO-1] should change the name of errors.

🍷 Learned :
1️⃣ sensitive variables mustn't have the default value during deploying. deployer must pass the value to constructor and set the new value there.

266 viewsKian, edited 12:51

KS note

📜 About Remappings in foundry ( something like alias )

🔗 https://book.getfoundry.sh/projects/dependencies#remapping-dependencies

239 viewsKian, edited 19:57

KS note

🪖 Glider

1️⃣ Hexens Secureum Workshop
2️⃣ JohnnyTime YT Video
3️⃣ Owen YT Video [1] - [2]
4️⃣ daily-glider
5️⃣ Glider Gitbook
6️⃣ Kasper Zwijsen
7️⃣ Officer CIA
8️⃣ rxyz's YT

YouTube

This Web3 Security Tool Transform a $1,000 to a $1,000,000 Bounty | Glider by Hexens Tutorial

This Web3 Security Tool Changes The Game | Glider by Hexens Tutorial

Glider, a powerful new tool created by Hexens, is here to take your Web3 bug-hunting game to the next level. In this video, I’ll show you how to leverage Glider to uncover vulnerabilities…

317 viewsKian, edited 12:29

KS note

👑 ALΞCTRONA - The Educational Hub for Blockchain & Smart Contract Security!

🔗 https://linktr.ee/alectrona.eth

Linktree

@Alectrona.eth | Twitter | Linktree

ALΞCTRONA - The Educational Hub for Blockchain & Smart Contract Security!

🔥2

486 viewsKian, 12:31

KS note

📝 Smart Contract Layout

1️⃣ Pragma statements
2️⃣ Import statements
3️⃣ Interfaces
4️⃣ Libraries
5️⃣ Contracts

📝 Inside contract, library or interface :

1️⃣ State variables
2️⃣ Events
3️⃣ Modifiers
4️⃣ Struct, Arrays or Enums
5️⃣ Constructor
6️⃣ Fallback OR Receive function
7️⃣ External functions
8️⃣ Public functions
9️⃣ Internal functions
🔟 Private functions

352 viewsKian, edited 12:40

KS note