🔗💻 Do you know how bytecode decompilation can be beneficial to your security? Our latest blog article explores the features and applications of bytecode decompilation in the blockchain industry.

▶️ Read on Medium: Bytecode decompilation: features and implementation in the blockchain industry

Stay tuned for more updates from SmartState 💚, follow us on social media to learn about our latest security services and success stories:

🤖 SmartState on X
🟦 LinkedIn
✈️ Telegram
🥳 Medium

❗️🪙 The Socket team found a Solana key‑stealing payload in the Python semantic-types package, which is also used to compromise 5 other packages (solana-keypair, solana-publickey, solana‑mev‑agent‑py, solana‑trading‑bot, and soltrade). Malware steals private keys by monkey-patching Solana keygen methods.

▶️ Know more: https://socket.dev/blog/monkey-patched-pypi-packages-steal-solana-private-keys

>25,900 downloads of the malicious packages. Solana devs, check your code 🔍

🔒✅ A quick security reminder: verify before you click. Scammers seem to be pretty active with their fake notifications from 'wallets', 'exchanges', 'social media' and 'business apps'.

Protect your crypto. Don't trust, verify.

🌎⚙️ Content-based addressing. You've probably heard of ENS on Ethereum or searched for NFT metadata on Solana. What unites these two examples is IPFS, a Web3 alternative to the 'classic' Internet. IPFS is a decentralized technology that fits seamlessly into the principles of blockchain, crypto, and the evolving Web3 ecosystem.

Find out more about IPFS and its applications in the blockchain industry:

▶️ Read on Medium: IPFS and its progressive role in blockchain, cryptocurrencies, and Web3

Stay tuned for more updates from SmartState ☺️, follow us on social media to learn about our latest security services and success stories:

🤖 SmartState on X
🟦 LinkedIn
✈️ Telegram
🥳 Medium

📝🔧 Function selectors in Solidity are your Ethereum smart contract roadmap.

Selectors guide the EVM to execute the right function of your code. So what are selectors? Let’s dive in.

Selectors are 4-byte identifiers that tell the EVM which function to call, so selectors are critical for contract execution.

🔍 Visibility matters. Selectors are intended for use by external contracts, so only public & external functions have selectors, as they’re callable externally via the ABI. Internal & private functions don’t have selectors as they are not needed.

🔢 How to derive the selector? First, you'll need the function signature. In Solidity, signature is a string that represents the function name plus its parameter types (not names). To calculate the selector, you should hash the function signature with the Keccak-256 algorithm and take the first 4 bytes. That’s it ✨

An example: for balanceOf(address), the Keccak-256 hash starts with 0x70a08231b98ef4ca…, so the selector is 0x70a08231

🛠 Why care? Selectors enable function dispatching, common standards and contract compatibility, and gas-efficient calls. Selectors are also vital for low-level calls.

Understanding selectors is useful for a better understanding of Ethereum smart contract execution and efficient blockchain development 💻

🤔❗️ Security myth busting: recently we heard the opinion that macOS and iOS are 'invincible' to malware, so using Apple products = 100% user crypto data security.

This is a classic myth, Mac and iPhone malware thrives, so be vigilant 🔍

▶️ An article with the list of Mac viruses, malware and trojans

Always protect your devices and assets 🔓

⁉️ Data breach: Forbes reports 16 BILLION login credentials, including passwords, from Apple, Google, Facebook and other leaked.

▶️ Forbes: 16 Billion Apple, Facebook, Google And Other Passwords Leaked — Act Now

To stay safe online, set strong unique passwords, enable 2FA, monitor suspicious activity 🛡

Have a good Friday, Everyone 👆 🎧

💻 Code quality in blockchain and crypto development means A LOT.
And linters are a powerful tool for increasing quality of your smart contract code.

Discover the benefits of using linters to improve coding efficiency, security, and readability 👇

▶️ Read on Medium: What are linters and how can they help in blockchain and crypto development

Stay tuned for more updates from SmartState 💚, follow us on social media to learn about our latest security services and success stories:

🤖 SmartState on X
🟦 LinkedIn
✈️ Telegram
🥳 Medium

✅ We are all used to hear of DeFi projects losing significant funds because attackers exploited vulnerabilities in the project.

This is a success story: a crypto project actually prevented losses by implementing coordinated blockchain security measures👇

Read an article: DODGING A BULLET

Proactive security measures are always a best practice ✅

🚨 Kaspersky alerts of a new SparkKitty stealer spreading through App Store and Google Play.

Trojan steals sensitive data such as seed phrases from user screenshots.

▶️ Read an article: Your cat pics are at risk: the threat posed by the new SparkKitty Trojan

🛡 Stay cautious, avoid screenshotting your private data