high_byte
@high_byte
Followers
6K
Following
17K
Media
2K
Statuses
13K
AI, Blockchain, Cyber Security and whatever else Breaking: smart contracts, @SpearbitDAO and solo audits; Ex: @ethereum foundation DMs open
Joined March 2016
high_byte is named after the C macro HIBYTE() which returns the most significant byte.
0
0
11
how did Bybit not realize they getting hacked. does this answer the question?
172
155
2K
@redteamwrangler imagine that was a human, chatting about fluid dynamics during work hours with customers. they'd be fired in a second.
6
12
1K
@pixelprotest_ yo this is actually the most useful game I've ever seen. any young adult should play this. this should be in the final exam.
2
1
712
here's a scary thought:. Zero Knowledge Proofs.imply =>.Zero Knowledge Hacks. imagine $1B being stolen but you can't tell who or how (or even when or where). now imagine printing $1T and you can't answer these questions.
29
45
468
solidity security tip:. instead of i++ you should write the ++ above the i so it looks like it's lifting weights and getting stronger. hackers will think twice before attacking your contracts. (yes this compiles)
38
35
406
I shit you not. this is an actual solidity optimization tip
solidity security tip:. instead of i++ you should write the ++ above the i so it looks like it's lifting weights and getting stronger. hackers will think twice before attacking your contracts. (yes this compiles)
46
33
378
@priyeshugarg you got two and only two options:. - sign the tx without seeing what you're signing. - sign the tx without understanding what you're signing.
8
13
370
@__silent_ they also didn't run over barrels in real life. how fake can this game be. ngmi.
The barrels hit by the car have a duplicated appearance of damage. (3/7)
4
0
237
Smart Contract tools I love 🧵. 1. @dethcrypto . it's loading any contract into visual code in your browser!. simply rewrite any etherscan[.]io url to deth[.]net and you're done. you can also have a quick bookmark to rewrite etherscan urls.
8
72
231
Introducing: Protomerkle. Build merkle trees on-chain! 🧵👇. I've been working hard writing some contracts (coming soon!), optimizing different merkle tree designs. Finally I've come up with a version I *really* like I decided to make a library out of it.
if you add proto to the beginning of a word you can make it 100x more efficent, who knew.
17
27
219
@TrulySNSTEAMS @kiiroi_jacket I think you meant like this. (made with zero iq).
short introduction to Zero IQ - my AI photo editor. contract me if you're interested in beta testing. follow for updates 😄
5
0
210
I hate foundry/forge. not because it sucks. it's great. but the name is UNGOOGLABLE (!).
29
4
212
all these fear mongering nay sayers trying to shine light about web3 hacks and how "it's not going great" - . I'm coming from web2 "classic" security and I can assure you it's a much bigger shit show:. - when hacks occur they are more often silent. - if ever the victim finds out,.
3
45
197
it's kinda frustrating to see something I suggested two years ago as a github issue is now a company backed by VCs. (literally this; except I called the keyword `offchain` instead of `shadow`).
We’re proposing ERC-7571 🌗. A standardized syntax for shadow events within Ethereum smart contracts to make it easier for them to be specified, discovered, and fetched by any offchain developer tools or infrastructure.
10
8
187
@visegrad24 brilliant idea giving traumatized terror-stricken women from extremist culture raising your children.
3
2
175
go explore contracts on it's awesome!. - no more contracts hell - just single flat file is displayed.- tree view for quick navigation doubles as interaction widget.- proxies resolved automatically.- view multiple addresses at once.- DARK MODE
12
23
185
solidity pro tip.(for security researchers and more). here is on-chain debugging trick I really enjoyed using today with forge:. I deploy a version of the contract with debugging info such as console logs then replace the proxy implementation with the patched version.
7
21
172
I've placed 100 trillion Ethereum wallet keys on Earth. Choose any one. And the best part? nobody can tell you are using it. ⛽️🧵👇.
15
15
160
a rare opportunity for solana to produce a block.
gm say it back (or i block you).
10
11
160
I WANT TO PLAY A LITTLE GAME. it's trivia! guess the term:. Rick & Morty. OR. Zero Knowledge
7
37
154
need free testnet? anvil.need free testnet with access to the internet? anvil + ngrok.need free testnet with 100% uptime? anvil + railway. 1. go to 2. fork 3. you done.
10
10
150
"EVM sucks". "we invested a quarter billion to make it suck faster". are you prepared for parallel sucking, anon?.
10
13
144
🎄⛽️🎄 EVM Internals - Christmas Edition 🎄⛽️🎄. Did you know. codesize() can never return 0?. Here's a fun example:.
5
23
142
rust devs be like
Wrote a rust lib for working with solc's AST:. It aims to be 1-1 compatible with solidity's internal representation ( and have identical visitor implementations. Analysing the AST is now as simple as this:
6
1
138
Solidity generics / templates. a short thread about how to achieve this with some hacks & optimizations. let's start with a neat trick to pass any type through calldata:
4
18
134
I'm judging in @ethereumfndn $2M pectra competition on @cantinaxyz . it may be unpopular opinion but ethereum's complexity is going parabolic. needlessly. on the other hand, it's an incredible opportunity for security researchers to find bugs!.
7
2
138
just spoke to developers of (creators of 🔥). really impressed by the progress they're making. soon it could replace etherscan (and other tools) entirely!.
7
4
125
ARE YOU KIDDING ME?!. and it's $1000/m if you pay monthly. how. HOW does that save on RPC bill if I can literally host MY OWN ARCHIVE NODE at that price?
27
6
127
Anyone can link to data structures implementations in solidity?. Stack, queue, linked lists, trees, etc.
7
11
124
nearly 3 years later, let's review:. what's changed?.what's better?.what's worse?. ->.
Things broken in EVM / Ethereum I would consider changing:.🧵.
4
6
120
first sneak peak demo:. the best (?) contract viewer experience. completely free and open-source!. coming soon to . (feedback welcome! thanks to @smlxldotio for sponsoring; this tweet does not endorse scroll and any appearance is completely coincidental)
10
18
112
as a judge on @cantinaxyz I have reviewed over 1000 findings. somewhere between 30-60% of findings are rejected. sometimes it's a minor oversight, sometimes it's real skill issue. but skill issue isn't bad. as security researchers we solve issues. get gud. good luck. 💪.
3
2
104
my rust friends. please. just. quick question. I. wanted to know. ARE YOU INSANE?!.
27
4
102
web3 security is a literal goldmine right now. Bybit sponsored $1.5B audit of Safe by well known auditing firm Lazarus Group. and you're bearish??.
tl;dr.- It was a targeted attack, only the Bybit Safe was affected.- It took 19 days (+ preparation) to pull off the attack.- Attack circumvented 2FA.- We need better transaction verification UX & industry efforts for secure (decentralized) frontends, not just smart contracts.
4
6
101
testing new smart contract primitive - this something I wanted forever now:. access storage using labels, instead of some arbitrary slot numbers. similar to JSON. do you like this syntax?
24
3
96
Let's build Solidity Standard Library.(no, not SSL. open for suggestions).
6
8
91
SQL on-chain is 🆒. A thread ⛽️👌. On the potential of SQL and the future of blockchain data
8
20
94
@StevenGlinert "and multiple missiles". hard to tell the exact price of those missiles, but they are comparably expensive. put that in GDP ratio and find out. also the laser systems are coming. $2 to shoot down $2m missile.
6
1
86
well, well. seems like I managed to inject offchain events (shadow / ghost / whatever logs) to a predeployed contract. completely free 🤣
16
1
94
oh so you want to CALL EVM? how cute. where gas goes when we CALL? I made a flowchart. validator tips not included 😅
8
13
83
@housecor pair programming should be about 5% of the programming. otherwise it's pear programming, one person is typing code and the other sits like a pear on a chair.
5
4
89
@IterIntellectus yes because everything you read on the internet is true.very reasonable to have a circle of friends who just 3 of them happen to die and you just head on twitter to post. I'm skeptical.
5
0
81
2023 in reth development, visualized. freaking wild I fkin salute you guys 🫡
4
6
88
@hahussain I was born and raised in Jerusalem. - 4C is not stay-at-home cold for us.- people aren't home, they just don't hang out with al jazeera in their spare time.
0
1
75
CertiK spits in the face of every victim giving a rugpulled project "38 safety points"
4
3
81
why he delete? 🫢
"EVM sucks". "we invested a quarter billion to make it suck faster". are you prepared for parallel sucking, anon?.
13
3
80
OMG IT'S PERFECT! 🥹. my contract inliner works amazingly well. how easy will it be to understand functions now!?. only two days worth of coding. video shows 5 different levels of depth.
7
2
80
🍁 ERC420 - a tokenized multisig vault. my @ethglobal sydney project is a type of multisig contract where each signer has associated ERC20 tokens that represent signing power.
8
5
82
@dominicfrei how to improve your twitter game:. 1. escape velocity starts from just >1000 followers so keep going. 2. find the best timezone for your audience. posts have finite lifetime, their birth being their prime time. 3. space your posts. you have finite algo-fuel, so if you make more.
6
3
80
yo dawg, I heard you like web3 & music, so I created SoundPhrase. why remember complicated seedpharses, words or numbers?. when you can just play a catchy tune and generate a private key or sign messages!
10
8
78