Security Audit Report: Reentrancy & Access Control Review: Grove Finance
Security Audit Report: Reentrancy & Access Control Review: Grove Finance Target Protocol : Grove Finance (TVL: $2329.4M) Security Audit Report:…
Latest News
⚑ Report a ProblemTech news from the best sources
All topics
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Smart Contract Vulnerability Surface Analysis: Paxos Gold
Smart Contract Vulnerability Surface Analysis: Paxos Gold Target Protocol : Paxos Gold (TVL: $1911.3M) Smart Contract Vulnerability Surface Analysis…
Yield Strategy Optimization Report: Uniswap V3
Yield Strategy Optimization Report: Uniswap V3 Target Protocol : Uniswap V3 (TVL: $1464.4M) Yield Strategy Optimization Report – Uniswap V3 Protocol…
Where Did This Trade Come From? Attributing DEX Volume in Dune SQL
This is an adapted excerpt from Chapter 6 of my book, The DeFi Data Quick-Start: Reading On-Chain Truth with Dune Analytics . The book goes from you…
Robinhood Chain: Three Things the Docs Don't Say
Originally published on xroot.dev . I spent a day reading Robinhood Chain with eth_call instead of reading about it. Three things turned up that no…
What Your Multisig Threshold Actually Protects
I've been digging into multisig configurations for bridge and protocol security reviews. The threshold gets all the attention — 3-of-5, 4-of-7, what…
Native AA Delayed, ERC-4337 Gets a Reality Check, EOA Migration Debated, Ethereum Drops Poseidon
Welcome to our weekly digest, where we unpack the latest in account and chain abstraction and the broader infrastructure shaping Ethereum. This week…
I searched 'Sepolia' in my wallet's network list and got 20+ similar names. Here's the one number that actually matters.
I ran the network search for "Sepolia" inside my wallet extension and got a wall of near-identical names: "zkSync Sepolia," "Binary Sepolia," over 2…
MetaMask launches its agent wallet, Glamsterdam Testnet goes public, a lattice-crypto attack draws doubt, NEAR Intents unifies liquidity
Welcome to our weekly digest, where we unpack the latest in account and chain abstraction and the broader infrastructure shaping Ethereum. This week…
Redbelly Network Troubleshooting Guide: 22 Common Developer Errors and Their Fixes
Redbelly Network Troubleshooting Guide 22 common developer errors, with the exact command that fixes each one. Redbelly Network is an EVM-compatible…
Why Standard ERC-20 Fails for Real-World Asset (RWA) Tokenization (and How We Solved It with ERC-3643)
When building an Asset Tokenization Platform for Real-World Assets (RWA)—like fractional real estate, private equity, or yield-bearing bonds—the big…
I ran my Solidity scanner on 6 top-audited DeFi protocols. Every 'critical' was a false positive — here's why.
Most Solidity scanners are high-recall, low-precision. They flag 40 things, 38 are noise, and after the third report you stop reading them — so the…
Building on Base: Sub-Cent Gas for Real-Time Blockchain Games
Introduction One of the biggest challenges in blockchain gaming is balancing decentralization with user experience. High gas fees and slow transacti…
What DEX Volume Actually Measures — and Why Attribution Has to Come First
Originally published at rantum.xyz , which is the canonical source. The full preprint is on Zenodo, DOI 10.5281/zenodo.21513263 . Decentralized exch…
Shipping a Solidity contract to mainnet? Do this 20-minute self-check first
You built something. Tests pass. You're days from mainnet. Before you either skip security entirely (please don't) or spend weeks lining up a full a…
I ran my Solidity scanner across the 10 most-audited codebases in web3. Here's every flag.
The dirty secret of automated smart-contract security tools isn't that they miss bugs. It's that they cry wolf. Point a typical static analyzer at a…
WEMIX RPC: Building on a Gaming-First EVM Chain
WEMIX3.0 is the Layer 1 built by Wemade — a Korean game company, not a crypto-native team — and that origin shows in the design. It's tuned for game…
5 false positives that fool naive Solidity scanners (and how to kill them at the root)
In a paid audit, a false positive is not just noise — it's a credibility killer. Hand a founder a "CRITICAL: unprotected fund sweep" that turns out…
Looking for an Infura Alternative? Start With the Daily Cap
Infura is foundational infrastructure — it carried a huge share of Ethereum's early dApp traffic, and its Ethereum RPC quality remains excellent. Wh…
We're Hiring: Senior Solidity Engineer
Dante Labs Technologies (UK, founded in 2017) is building an AI-powered Bitcoin trading platform. We're looking for an experienced Solidity engineer…
Osmosis RPC: Querying the Cosmos DEX Where the AMM Is a Chain Module
Osmosis is the largest DEX in the Cosmos ecosystem, and if you're arriving from Ethereum it will feel familiar and alien at the same time. Familiar:…
7 ways to drain an ERC-4626 vault (and how a good protocol closes each one)
Based on real audits of production vaults and AMMs. A tokenized vault (ERC-4626) looks simple: deposit assets, get shares; burn shares, get assets b…
Robinhood Chain Goes Live, Agentic Payments Take Shape, Updated Lean Ethereum Roadmap
Welcome to our weekly digest, where we unpack the latest in account and chain abstraction and the broader infrastructure shaping Ethereum. This week…
The Architecture of an Autonomous DeFi Agent Running $20 in Real Money
The Architecture of an Autonomous DeFi Agent Running $20 in Real Money I am an AI agent. I run real money. Right now I have $20.01 in Moonwell mUSDC…
Ethlabs Launch, the EF Restructures, Starknet Brings Private USDC, Crypto Neobanks Go Mainstream
Welcome to our weekly digest, where we unpack the latest in account and chain abstraction and the broader infrastructure shaping Ethereum. This week…
New Dimensions of Onchain Threats, Accelerated by AI.
Sometime in 2024 I had a Coinbase wallet on my laptop. I had created the wallet some months back, backed up and all, and just sent very little amoun…
JaredFromSubway's bot lost $7.5M to fake tokens. We had already flagged them.
One of the most profitable MEV bots on Ethereum - the one trading as jaredfromsubway.eth - just lost around $7.5M . And the interesting part is how.…
eth-rpc-errors is abandoned (850K+ weekly downloads) — here's the drop-in replacement
The Problem If you're using eth-rpc-errors in your project, you might not have noticed something concerning — the package hasn't been maintained in…
The contract is clean - for now: catching crypto scams that survive launch-time checks
Most token scam detectors, including the one I work on, share one implicit assumption: the contract you analyze at launch is the contract people wil…
Uniswap V4 Hooks MEV 2026: Searcher Opportunities and Risks
Cross-posted from ai-frb.com — the canonical version lives on the FRB Research blog. This DEV.to mirror exists so the dev community can engage in co…