will you buy?

Fresh FTX app update available, don't update. get far away from it.

most likely has a purpose to steal your private keys.

‎🚨 Grayscale and parent company Digital Currency Group, which owns 633,000 BTC, seem to be in big trouble: - The discount of GBTC to Grayscale Bitcoin Trust net asset value hits a record 42.7%. - It is reported that the Digital Currency Group must begin to liquidate part of the fund in 633,000 BTC in order to restore the situation. Grayscale declined to provide proof of reserves, citing "security concerns" and also indicated that all funds are held by Coinbase. - Removed page with team members on Digital Currency Group website (archived). - Grayscale's problems began during the collapse of Luna and Three Arrows Capital, and FTX finished them off (the relationship of Grayscale and DCG with other companies in the picture below). All Grayscale coins belong to them, not to clients. The role of the company was to provide 1 share of GBTC with storage of 1 BTC.

Source:Daniil

Smart contract auditing.

Summary: Jabber/ XMPP Is a secure messaging protocol
with many advantages in addition to many features
in the cryptography domain. Although it's not as
popular, it's still being actively maintained and utilized.

Cryptography: It uses End-to-End signing to ensure that both parties receive
the validated message sent/ recv. to ensure it hasn't been compromised
through various interception techniques such as over-the-wire packet interception
or other attacks such as SSL stripping, etc. A massive feature is OTR (Off-the-Record)
protocol. It's data is hashed with a combination of encryption such as the Diffie-Hellman
and SHA-1 hash. In addition, it requires both parties to utilize at once instead of the basic
XMPP/ Jabber client. Highly advised in sensitive situations.

Resources:
- (1) https://www.jabber.de/was-ist-jabber/ -- "What is Jabber/ XMPP"
- (2) https://xmpp.org/getting-started/ -- "How to setup Jabber/ XMPP"
- (3) https://wiki.xmpp.org/web/OTR#:~:text=Off%2Dthe%2DRecord%20Messaging%2C,the%20SHA%2D1%20hash%20function.

Notes:
- There isn't just one server to utilize. There are plenty out there. Lastly, it's
not up to the server but to you to secure your communications as the client.
If you need assistance, feel free to tag or PM me.

author:cosmo

update any Chromium browsers (Chrome, Brave, etc) NOW https://www.forbes.com/sites/daveywinder/2022/03/26/google-confirms-emergency-security-update-for-32-billion-chrome-users-attacks-underway


Old but important info

Defrost finance exploited

This poll is closed.

መገናኛ ቀናችን ቅዳሜ ይሁን ወይስ እሁድ?

1. ቅዳሜ (2 / 6) – 33.33%
nige24, Koushik Biswas

2. እሁድ (4 / 6) – 66.67%
Selam, usra4ever, Anonyguy, Birtukahn Jesus

Last updated: 2023-01-11 10:59:54 EET

This poll is closed.

Which web3 project's vulnerable code was this?...

1. Cosmos (0 / 1) – 0.00%


2. Bored Ape (0 / 1) – 0.00%


3. Reimagined Finance (0 / 1) – 0.00%


4. Olympus DAO (1 / 1) – 100.00%
Retro099

Last updated: 2023-01-04 10:01:58 EET

The Dedaub team has disclosed a Critical vulnerability to the Uniswap team!

Funds are safe - Uniswap addressed the issue and redeployed the Universal Router smart contracts on all its chains 👏

The vulnerability allows re-entertrancy to drain the user's funds, mid-tx.

#Uniswap recently introduced the Universal Router. It unifies ERC20 and NFT swapping into a single swap router. Users can perform heterogenous actions, e.g., swapping multiple tokens and NFTs in one tx.

This router embeds a scripting language for all sorts of token actions.
Such commands could include transfers to third party (potentially untrusted) recipients. In a correct implementation, such a transfer should send to the recipient only what the call parameters specify.

And nothing more.
However, if third-party code is invoked at any point in the transfer (which manifests itself due to composition of protocols), the code can reenter the UniversalRouter and claim any tokens temporarily in the contract.

·
One part of the PoC was implemented below.

The attacker also needs to implement code to reenter the router (calling execute) and sweep all token amounts.

The router may contain funds mid-transaction due to other actions and transfers in a complex swap...
Image

E.g.,

1) transfer an NFT
2) transfer the remaining funds.

The receipient of the NFT can easily reenter UniversalRouter (between steps 1 & 2) by calling transfer or sweep inside its onERC721Received handler and drain the entire amount!

We advised the Uniswap team to add a reentrancy lock to the core execution of the new router, and redeploy.

This modification was swiftly implemented, fixing the issue before the router gaining mass adoption: https://library.dedaub.com/contracts/Ethereum/0xef1c6e67703c7bd7107eed8303fbe6ec2554bf6b/source?line=2787
Dedaub
@dedaub
·
Jan 2
We thank the @Uniswap
team for awarding a bug bounty.



Further reading:
media.dedaub.com
Uniswap Bug Bounty
By the Dedaub team


source : Dedaub

https://chat.openai.com/

It's the cool gift that 2021 have gave us ,when we were about to leave the year behind.
2021, rest in the almighty peace.


chatgpt helps on explaining questions on simple terms with examples.
it should help on your learning curve!

https://eip2535diamonds.substack.com/p/understanding-delegatecall-and-how?s=r

Helpful article about delegatecall in solidity.

https://dev.to/rushanksavant/delegate-call-order-of-variables-4k3


Interesting.