Education

Source: The Notorious Bug Digest #5 – OpenZeppelin Overview OpenZeppelin’s latest bug digest reveals three critical Web3 security findings, dissecting complex incidents that expose emerging risks in the post-EIP-7702 era, Uniswap V4’s penalty mechanism, and recursive function pitfalls in DeFi protocols. 1. EIP-7702 Delegated EOA Exploit Circumvents Flashloan Protection

Source: Yo Protocol’s unseen dangers-Why code audits aren’t enough Yo Protocol, a multi-chain yield optimizer deeply woven into the DeFi ecosystem, recently passed audits by well-known firms – reportedly free of critical vulnerabilities. Yet, a thorough review of its architectural design and documentation reveals significant risks beyond the initial

Source: Red Flags and Green Flags of Yield Bearing Stablecoins | composable-security.com Yield bearing stablecoins aim to maintain a stable peg to fiat currencies while generating yield from lending, staking, or real-world assets. Because they promise both stability and returns, careful scrutiny is essential to ensure their safety and sustainability.

Source: blog.zksecurity.xyz - Timing Attacks à la Kocher Paul Kocher’s landmark 1996 paper revealed a critical vulnerability: cryptographic operations can leak secret key bits through their execution times. This type of side-channel attack exploits implementation details rather than the math behind the algorithms. Here’s a breakdown

Source: Transitioning from EVM to SVM: Key Concepts for Solana Security Assessment Solana operates differently from Ethereum’s EVM, especially in how it manages programs, storage, and transactions. This guide highlights the key Solana concepts developers and security auditors must understand when assessing Solana programs. Program Derived Addresses (PDAs) and

Source: The Role of Formal Verification in Web3 Security As decentralized protocols get more complex and interconnected, formal verification has shifted from a niche technique to a vital security standard. It offers a mathematical guarantee that smart contracts behave exactly as intended, ensuring robust protection against bugs and exploits, especially