The fee-on-transfer bug that locks funds forever (with a working PoC)
Last week I found this pattern in a real audit. I can't name the protocol — it's under responsible-disclosure until the program confirms a fix — but…
Testing & QA
⚑ Сообщить о проблемеПоследние новости Testing & QA от Tech News
Все темы
agents
ai
api
architecture
automation
backend
beginners
career
claude
cybersecurity
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
softwareengineering
testing
tutorial
typescript
webdev
Тестируем смарт-контракты на Hardhat 3: node:test, viem и ни одного mocha
Hardhat 3 выбросил mocha и chai и теперь тесты гоняет родной node:test, а с контрактом разговаривает viem. Гайды по миграции подробно рассказывают п…
How to Rehearse Smart-Contract Rollback Before Calling a System Upgradeable
A smart contract can accept a new implementation and still have no safe route back. The upgrade transaction may succeed, the old bytecode may remain…
400 rounds, and the bug never showed up. So I stopped rolling dice.
The most expensive bug in the game I just shipped could only fire on 1.01% of rounds. Here is the shape of it. Replay is a betting game where the fi…
Hedera's EVM speaks tinybar, its RPC speaks weibar, and both mistakes return SUCCESS
I lost most of a day to a bug that never once failed. I was building a contract that pays for its own future: an access subscription that re-arms it…
The one fact no Ethereum receipt carries: which transaction ran first
You got sandwiched. Your swap landed between a searcher's buy and their sell, you paid for it, and every receipt you can pull agrees that you were r…
Six contracts that pass EXTCODESIZE(owner) > 0 and still withdraw their order
On an order book, the depth you see is a promise. The market maker showing you a bid can pull it in the same block you try to take it, and nothing o…
3 Things I Learned Building a Smart Contract Project with Foundry
When I started building my NFT marketplace in Solidity, my main goal was simple: Make it work. But as the project grew, I realized that writing Soli…
Redbelly Network Troubleshooting Guide: 22 Common Developer Errors and Their Fixes
Redbelly Network Troubleshooting Guide 22 common developer errors, with the exact command that fixes each one. Redbelly Network is an EVM-compatible…
Two access-control hacks drained $1.4M this month - the one-line bug, and the check that catches it
In the last few weeks two protocols were drained through the same class of bug: an access-control exploit . RISEx lost ~$673k. WEMIX.FI Lend lost ~$…
Function Calling With a Local LLM to Drive Foundry: Fuzz, Read, Repeat
The first time I let a local model drive Foundry unsupervised, it spent eleven turns trying to fix a fuzz test by renaming the test function. Not ch…
I'm Entering My First Sherlock Audit Contest: The Setup, the Plan, the Fear
I have shipped software for 18 years. Roughly 8 of those in crypto. And this week I signed up for my first Sherlock audit contest, and my hands were…
MythX shut down in March and nothing replaced it so I built something
If you were using MythX before March 31st, you already know. ConsenSys quietly sunset the entire MythX suite. One day it was there, the next your CI…
I built my first Robinhood Chain app as an index basket
I built a small index basket app on Robinhood Chain because I wanted to understand the developer path from the first contract deploy all the way to…
Front-Running and MEV: Writing Contracts That Don't Leak Money to the Mempool
When you submit a transaction, it sits in the public mempool before it is mined, visible to everyone. Bots watch that mempool and reorder, insert, o…
Access Control Bugs: The #1 Cause of Smart Contract Hacks This Year
Every year the post-mortems pile up, and every year the same category sits at the top of the loss chart. Not reentrancy. Not oracle manipulation. Ac…
Foundry Invariant Testing: Finding Bugs Fuzzing Can't
Your fuzz tests pass. Your unit tests pass. Coverage is green. Then the protocol goes live and someone drains the vault with a five-transaction sequ…
A .NET Dinosaur in Web3. Day 16 - ERC-20 Token & ICO
A .NET Dinosaur in Web3. Day 16 - ERC-20 Token & ICO 😈 Day 4 of 7: Building Own Currency… Cryptocurrency! Day 4 it’s exactly give me some practi…