7 ways to drain an ERC-4626 vault (and how a good protocol closes each one)
Based on real audits of production vaults and AMMs. A tokenized vault (ERC-4626) looks simple: deposit assets, get shares; burn shares, get assets bac…
Latest News
⚑ Report a ProblemTech news from the best sources
All topics
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
tutorial
typescript
webdev
I built my first Robinhood Chain app as an index basket
I built a small index basket app on Robinhood Chain because I wanted to understand the developer path from the first contract deploy all the way to a …
The Tether Paradox: Shitty ERC-20s, OpenZeppelin, and the Unstoppable Web
I have a confession to make. When I first saw that Tether—the behemoth behind the $110 billion USDT stablecoin—was the primary financial backer of Hol…
Signature Replay Attacks in Solidity: The Bug That Looks Correct
Some smart contract bugs scream at you. A missing onlyOwner , a reentrancy with the state update after the transfer. Signature replay is not one of th…
AgentJobs: Non-Custodial Agent-to-Agent Escrow, Live on Monad
The problem AI agents are starting to hire each other — one agent delegates a sub-task to another, pays for the output, moves on. The blocker isn't ca…
Front-Running and MEV: Writing Contracts That Don't Leak Money to the Mempool
When you submit a transaction, it sits in the public mempool before it is mined, visible to everyone. Bots watch that mempool and reorder, insert, or …
The Token Is the Least Interesting Part of Tokenization
"Most tokenization discussions stop at the token. In reality, the token is often the simplest component of the entire system." There is a moment that …
Gas Optimization That Doesn't Break Security: Storage, Calldata, and the Traps
Gas optimization is satisfying. You shave a few thousand gas off a function and feel clever. But some optimizations trade away safety in ways that are…
Reentrancy in 2026: Why It Still Drains Millions (and How AI Spots It)
Reentrancy is the oldest trick in smart contract exploitation. The DAO fell to it in 2016. You would think a bug this famous would be extinct by now. …
Access Control Bugs: The #1 Cause of Smart Contract Hacks This Year
Every year the post-mortems pile up, and every year the same category sits at the top of the loss chart. Not reentrancy. Not oracle manipulation. Acce…
Foundry Invariant Testing: Finding Bugs Fuzzing Can't
Your fuzz tests pass. Your unit tests pass. Coverage is green. Then the protocol goes live and someone drains the vault with a five-transaction sequen…
Delayed Ownership on Ethereum: A Different Custody Model
Delayed Ownership on Ethereum: A Different Custody Model Most Ethereum assets assume a simple rule: once a transfer is confirmed, ownership changes im…
A .NET Dinosaur in Web3. Day 16 - ERC-20 Token & ICO
A .NET Dinosaur in Web3. Day 16 - ERC-20 Token & ICO 😈 Day 4 of 7: Building Own Currency… Cryptocurrency! Day 4 it’s exactly give me some practice…
Generative algorithm using human interpretation
Hi everyone! I released a participatory generative art collection where the algorithm's inputs are human interpretations of a daily cultural prompt ra…
🧟 Level 3: The Creation Engine — Powering Up the Factory (Solidity Quest)
In Level 2, we built the storage vaults (Arrays) and defined the DNA blueprints (Structs). But a factory without motion is just a museum. Today, we in…
A .NET Dinosaur in Web3. #1
A .NET Dinosaur in Web3 — Day 1: First Smart Contract I've been writing .NET for many years. Today I deployed my first smart contract. Here's what act…