philogy
@real_philogy
Followers
6K
Following
9K
Media
458
Statuses
7K
EVM auditor & dev | eng @SorellaLabs | LSR @SpearbitDAO
Joined January 2019
*Please* don't get baited into contributing to Uniswap's **proprietary** codebase for free. It's not a public good, doesn't benefit the ecosystem (only Uniswap) and is basically just doing free work.
solidity devs, time to earn your v4 contributor status 🫡.
18
33
369
After yesterday's competition I'm very proud to formally announce BALLS (Bytecode Assembler \w Low-Level Scheduling). A DSL / Huff-preprocessor written in Rust, allowing you to easily generate optimal** assembly. 1/x.
28
42
336
Can't believe how much I've been doxxed this Denver (wasn't really anon anyway) but yesssssssss, I DID IT. #1 Curta Golf Winner 💪🥇. All with the help of my new compiler BALLS, will make a full thread and official announcement tomorrow. But first, we celebrate! 🍾.
33
13
301
I'm very excited to publicly announce that I've joined @SorellaLabs as their newest Founding Protocol Engineer. 💼. Excited to help set the new standard for safety, efficiency and UX in DeFi and MEV infrastructure. ⚡️.
26
8
298
How changing 1 keyword could've saved Blur airdrop claimers ~$34,500 in transaction fees. 🧵 (1/9).
10
39
258
Sad to see that @huff_language has been archived, hasn't been receiving a lot of love lately anyhow. But I ❤️ Huff and won't let it die. Going to build Huff 2.0:.- Delete tech debt.- Better errors.- Better label semantics.- backwards compatible. ETA, end of October (busy rn).
22
12
241
Let's not fumble the bag with EIP-3074. It's a huge upgrade for wallet UX and AA *BUT* it has a big flaw (I'm not talking about the potential for 1-sig drainers, IMO that's just a wallet skill issue):. You see the actual problem? The `nonce` & `chainId` fields. 1/9 👇🧵
22
23
226
🪡 Introducing SSTORE3, a new efficient way to manage data in your contracts. ⚡️Similar to SSTORE2, SSTORE3 enables you to save gas in your contracts by leveraging the relative cost of reading bytecode of external contracts vs. storage. (1/13).
10
30
219
Extremely irresponsible for the official @ethereum account to be marketing this ponzi. cc @VitalikButerin.
6/ The MicroStrategy playbook for ETH? That's what @eth_strategy wants to build. Fully onchain, as decentralized as possible, DeFi-native and open to everyone.
45
4
231
Introducing Sub Zero ❄️, a way to trustlessly tokenize, transfer and sell vanity addresses. Want a vanity address without having to configure & mine it yourself?. Now you can just buy one off the shelf! DM if interested 📩. 1/14 (more deets below)👇
13
15
216
omg. 🥹. I actually did it . ⚡️⚡️ A constant gas, 21* method, ABI compliant, selector switch using only 67 gas ⚡️⚡️. Stay tuned & follow for the write-up.
15
11
201
Fuck these shitcoins. 🖕. We NEED to rebrand. I can't seriously tell people I work in crypto anymore. It's EMBARRASSING. Any Ideas?. "Distributed Systems"."Decentralized Web"."Fault Tolerant Infrastructure"."Fintech". Ideally something that's trademarked and can be legally.
51
5
195
Ayo geth is finaly under 50%?. Client diversity, let's goooooooooooo 🥳🥳
7
23
186
I honestly don't get what the big deal around parallel EVM is. Did we forget that DA and state growth is still the bottleneck rn or wut?.
16
8
173
2 weeks ago at @ETHBerlin, me together with @OanaDesu & @Chloe_zhuX decided to make an unconventional hackathon project:. A visual explainer of some of the math behind zkSNARKs. Using manim (3Blue1Brown's animation tool) we created this: Enjoy 👌.
10
21
172
Guess who already found their first issue in v4. Nothing severe (prob low-med issue): But a malicious `owner` could brick the `initialize` function, preventing new pools from being created.
1/ Today, we’re announcing our vision for Uniswap v4 🦄. We see Uniswap as core financial infrastructure & think it should be built in public with space for community feedback and contribution. An early implementation of the code can be found here:.
12
3
155
It's been a while but I've finally gotten around to writing some Rust again 🦀😋. Introducing EVM Glue ("Glue")🫠 an EVM assembler written in Rust:. EVM Glue gives you an easy-to-use API to string together opcodes into bytecode. (1/7) 👇️🧵
9
25
149
Another Solidity man-made horror beyond my comprehension just dropped. (New way to inject Huff into Solidity that is slightly cleaner, composable and likely verifiable on etherscan)
19
8
146
Introducing not-so-static, transient storage that's MUTABLE within STATICCALLs. 👀. Only costs ~600k to read and ~250k to write 💀. If you use this in prod I will personally throw you out the window of a 50-story building. 😭.
25
7
151
Vitalik going between 20 side events to give a half hour talk at each
6
9
143
Day 1 of learning Rust 🦀. - re-read "Rust in Y minutes".- watched some vids on wtf `Box` and `Rc` are (still don't fully get the point of `Rc`).- Did advent of code day 1 in Rust (pls roast my 35 lines of noob code):.
14
3
135
So I did a thing 😅👉👈. (@huff_language compiler from scratch in just over 600L of Python, using parsimonious for parsing). Originally for the huffathon but didn't have enough time to finish during. Core features there, missing built-ins tho.
12
15
132
Does using assembly in Solidity lead to more bugs or is it a skill issue? 😎😬. Come find out in the $150,000 security competition to break the code I've written for @SorellaLabs' Ångstrom, starting Monday, on none other than @cantinaxyz ✨.
4
11
136
🤓 Smol smart contract dev alpha:. Once EIP-6780 is live (expected in the upcoming Cancun hardfork afaik) there may be quite a few situations where `selfdestruct(. )` will become a *the* new way to send ETH. 👀. 👇🧵️.1/10.
9
20
125
⚡️Presenting "Singleton Swapper" the efficient Singleton AMM with in-memory flash accounting:. ✅ Open-source (AGPL).✅ In-memory flash accounting.✅ Compact operation encoding.✅ Simple k = x*y pools.🚧 More optimizations.🚧 Direct EOA accessibility.
3
12
127
Did you know that Solidity is not that efficient at reading to & writing from packed structs? 😬. With just a few lines of code, you can manually pack values and save ~200-300 gas per struct change. 💸. Let's dive in, looking at the following code as our base example👇. 1/15
5
20
132
🤫 Noir alpha:. @aztecnetwork new L2 already works 👀👀👀. @Maddiaa0 showed me some code and the fact that he can run it locally, write and deploy contracts 🤯. Future of smart contracts is here ⛳️. Just need to wait for some docs so that we can go ham on it ourselves 😁.
5
14
127
Sharing my small afternoon project "GooSitter" 👵: a simple custody contract enabling you to automate the collection and purchase of new Gobblers 💸 without needing to hold your Gobblers in a hot wallet 🥵:.
8
24
104
🧑🔬 Interesting solidity "hack": storing `address(this)` as an immutable variable upon contract creation. Useful if you want to detect delegate calls to prevent / require them or if you want your proxies to know the implementation address without needing an `SLOAD` op.
7
14
117
These pics are literally so motivating. Like wtf am I going to do? Not maintain the reputation that I am literally constantly shipping everywhere I go?.
bro we literally reached brekenridge 5 mins ago and he’s already back at it
4
5
118
Thinking about it, will anything EVM-related I ever build come even close to the bad-assary of this?. Is it time to pivot to control systems/mechanical engineering and speedrun a US green card in <2 years?.
14
3
117
Proud to announce that I've created was is likely the most optimized batch minting ERC721 implementation to ever exist up to this point! ⛳️. What I've done is rewritten ERC721A using @huff_language (minus some bells and whistles), leading to significant savings across the board.
7
10
113
Please don't tweet stuff like this. You're going to nerd snipe some poor fella into working on an absolute abomination for 3 weeks straight just to prove a point 😭. I know this because I've been that guy.
The only thing that is still infeasible on Solidity / EVM is a fully featured regex engine.
7
1
118
Attackers have no respect 😭💀
Hi @hashflow, you may want to take a look: It appears there is an approve-related issue.
5
4
107
Wanted to make a smol thread bc I saw even some really good auditors get confused by my post the other day. 🤔. The following code is vulnerable, right? Classic reentrancy? Wrong. 😑. The code is safe with a small asterisk. 👇🧵 (1/12)
12
13
109
If you're looking for someone to help you build out and/or secure your smart contracts lmk as I'm looking for short-term freelance work. 💼. If you need high-quality smart contract code and need it fast, I'm your guy. 🧐. DM for inquiries 📩.
8
19
104
Never been more hyped for the launch of a project. Being decentralized on day 1 is actual insanity and these madlads are actually going to pull it off. Wouldn't be surprised if Aztec ends up being the first >1B$ TVL stage 2 rollup.
6
2
109
Fellow rustaceans. What's the fastest way to get gud at Rust?. Just raw dog building projects and reading high-quality Rust code or are there also any guides/books you'd recommend?. cc: @0xjepsen @0xcccrrr @jtriley_eth @refcells.
31
6
99
Been very disappointed with the things @base & @jessepollak have been promoting recently. Have they just given up? Is this what they think “building for the users is”?. Sad.
13
0
107
Gas golfing? 🥱. May I introduce you to: zkVM program cycle golfing 👀⚡️
13
1
104
Only 3 days in and I'm starting to really like Rust already. - high performance.- cool terminology ("borrow-checker", "mutex", etc.).- DX reminds of me of Haskell.- nice aha moments while learning and applying knowledge in Rustlings.- cute logo.
17
0
103
Just donated $500 to vyperlang.eth, it's not much but I wanted to support the team. 🤝. Venom, the foundry integration & other general improvements have made me more bullish than ever. ✨. Soon I will primarily and solely be using @vyperlang instead of Solidity. 📈.
8
5
103
Bro can Americans gtfo with these 🤡 opinions. "nO oNe working On tHe weEkeNd? nO woNdeR eUropE is cOOkeD". You know nothing burger man.
literally the only living soul in this european wework on the weekend . is this the reason europe is cooked?
10
1
102
Very proud to announce that our @cantinaxyz competition has completed, with NO HIGHS. Not all perfect though, the 2 mediums are a bit of a disappointment but something to improve on for next time 🫡. Very interesting experience being on the other end of a competition.
3
2
104
What does `uint256 x = (a ? 1 : 0) << 8;` evaluate to if `a` is `true`?.
9
18
101
I'm starting to agree with @big_tech_sux and @lightclients that EOF is not worth the complexity. EOF seems to be mostly about solving stack too deep which compiler teams are doing on their own anyway. If we *could* start from scratch EOF would be the way to go but that's not.
11
7
102
Built my first ZK circuit using #noir, zkSudoku. If you're a zk optimizer would love to know what you'd do differently / optimize:. Not as elegant as I'd like it to be bc Noir doesn't support programmatic array indices and nested arrays yet.
8
12
99
What fields of math are most fundamental to ZK?. - linear algebra?.- group theory?. Want to not only be able to read the papers (PLONK, STARKs) but also understand why they work the way they do.
19
4
97
I just discovered a bug in my code, that makes me want to pull my hair out. Guess which version caused the bug?. That's right, the "clean Solidity" one. SOLC DOESN'T IMMEDIATELY CLEAN THE UPPER DIRTY BITS WHEN YOU TYPECAST. WTF?????!!!!
12
2
95
⚡️ Just built what are probably some of the most efficient ETH & ERC20 disperser contracts out there:. In none other than @huff_language of course. 1/9.
7
3
96
We paid a lot for devs. They wrote a lot of code. Too much code. The most unnecessarily complex & verbose code auditors have ever seen. PVP Money. Coming soon.
98 Contracts. 1,266 Functions. 108,000 lines of solidity code. The largest smart contract network the auditors have ever seen. PvP Money. Coming Soon.
9
2
92
@SorellaLabs is looking for a senior smart contract engineer to join the team. If you're interested DM me:.- a link to smart contract code *you* have written & are proud of.- (optionally) a CV. Comp: $150k - $250k + competitive equity.
9
12
90
I'm very bullish @Uniswap V4, I think it will show that good smart contract design & gas optimization is not just a niche obsession, but a competitive advantage.
3
0
93
If you think your code is secure simply because “PhDs wrote it” you’re ngmi.
@pashovkrum We’ve got 3 PhDs from places like Stanford, Cambridge, UCLA building this out. Yeah, let’s that that bet. Doesn’t even have to be on the pre-audited code, but 2-300 lines that we’re adding.
12
2
87
🧑🏫Tip of the day:. You can easily symbolically execute your foundry fuzz tests via `hevm` by adding the following modifier to the test in question:. (1/5)
3
7
88
> imagine if more web2 founders heard this.> extraordinary story. they’d pivot from ai to.> crypto tmrw. It's literally an online casino, a ponzi factory. Nothing to encourage let alone admire. Very bearish if these are the kind of projects you encourage / support.
i asked chatgpt bard claude perplexity has there ever been a startup in history that went from conception to $100m revenue in half a year. none of them could give me an answer. what’s more is that this happened at time when .- crypto isn’t in a full blown bull market.- virtually
10
4
86
⚡️ Presenting the relatively unexplored area of function dispatcher optimization. 🤔 What are function dispatchers, how are they built and how can you optimizoooor them using Huff?. 👀 Find out in my new blog post:.
5
24
80
First contrib to foundry got merged 🥳. `safeconsole` is now part of forge-std 😁. You can now debug your low-level functions without worrying about changing memory. `safeconsole.logMemory(offset, size)` also lets you log a slice of memory.
8
2
86
👀 Solidity's "return" vs. Inline Assembly's "return" 👀. ❓ Did you know that `return` in inline-assembly behaves differently in Solidity than it does in assembly?. 🧐 Did you also know there's a cool pattern to achieve almost the same in assembly as Solidity?. (1/8) 🧵👇
1
6
82
✅ 1 week without YT, Netflix, Twitter, Porn complete. ⚡️ Shipped 10x more than I have in a long while, felt more engaged in my work & managed to read some books. I think social media can be a ok but I was kind of addicted. Detox did me good. (1/5)
8
0
83
> "PUSH0 that's just a small opcode change". Meanwhile the Huff discord:
7
7
81
💯💯💯 How are there only ~6 people working on Solidity full-time and like what ~3 on Vyper?. Then there are a couple of part-time people working on Fe?. We need to fund more compiler devs.
@mitche50 @0xkarmacoma @real_philogy @rabuawad_ @vyperlang compiler teams are one of the most underfunded tech teams in our industry, whilst being responsible to secure billions of funds. We need to enshrine a scalable way of funding these teams to ensure that these unrealistic expectations can be tackled at all.
5
4
82
Is there something like college but for dropouts?. Live together with fellow dropout zoomers, learn & work on cool shit during the day, party and consume narcotics at night?. (Asking for a friend). (he's me, I'm the friend).
20
3
82
OMG, 4k!. thanks to everyone who’s following, I’ll keep on working to provide valuable technical content (and the occasional shitpost)
6
0
80
👷 Ever tried to debug a low-level Solidity library in Foundry that interacted with memory a lot but had a tough time because `console{2}.log` would itself allocate memory?. ✅ Fear not you can now use `safelog`:.
6
7
80
TIL 💀. Was about to report this as a bug in solc but apparently this is "intentional" This is actually crazy. A compiler option should not trigger different semantics. This technically make Solidity-legacy & Solidity-via-IR different languages.
@milotruck So fun fact, this is actually unclear! . If you compile it with --via-ir, it would actually return 0xEF, however without --via-ir it returns 0xDEADBEEF.
5
3
81
Watch me discuss DeFi circuit breakers, their potential and trade-offs with @laurashin 🧐.
🔒 As DeFi thefts soar to $3.1 billion, is ERC-7265 the superhero we need? 🦸♂️.@real_philogy 🔎 goes over this 'circuit breaker' for DeFi contracts. 🚀 Can this be the key to mass adoption?.😰 Are there centralization risks?.🎧 Tune in to the latest Unchained episode now:
17
10
79
Learned about @solana’s state model recently. Very cool, simple & elegant. Optimized for real world hardware. Their VM is kinda whack tho, max call depth of 4? Max tx payload size of 1232 bytes?. Definitely improvements to be had on both sides of the landscape.
16
2
81
A quick thread on storage slots, hashing, and the elusive -1 used in ERC-1967 because I've seen some people confused by it. 🧵👇1/15.
2
16
74
Dear MEVooors who are afraid of adding authorization checks bc of gas usage, here's an incredibly efficient msg.sender check you can add to your code (inline assembly):. ```.assembly {. returndatacopy(returndatasize(), returndatasize(), sub(caller(), AUTHORIZED_ADDR)).}.```.
It seems a MEV bot ( on BSC is being exploited. Here is the decoded tx:
3
5
75
Damn, unlike GPT-3.5, GPT-4 actually has a decent understanding of EVM bytecode. Was able to find 2/3 vulnerabilities in the following bytecode (once translated into mnemonic form):.
8
4
75
Very surprised when friends raise and don’t ask me to angel 👉👈. So just putting it out there, if you need an advisor/angel that’s an expert in smart contracts and mechanism design feel free to reach out. For reference I’m already an advisor at @asymmetryfin and @Optimism.
3
1
77
Developing *the* DeFi circuit breaker standard at @dereg_io. Free and open-source.🔒. Goals are:.- reduce protocol attack surface.- limit atomic exfiltration.- standardize existing approaches.- have good integration DX. If you're interested DM ✉️.
3
7
73
The most bearish thing about the state of EVM languages is that every team seems to be working on their own IR:.- @solidity_lang : Yul.- @official_fe : Sonatina.- @vyperlang: Venom. If we just had 1 IR team and 3 frontend teams we'd be so much more productive.
8
5
73
Hypothetical implementation of ERC20 in a new language, wdyt? 👀🤫.
29
0
77
Me and my brother, Dimi (@dimidumo) have decided to disband our project "DeReg". 🙅♂️. Amicably ended, it's been a hell of a journey, I learned a lot about myself and even fundraised for the first time. 🏔️. Link to my full announcement blog post below 👇.
13
1
74
Vyper is growing on me. - Codegen is surprisingly good.- Readable Pythonic Syntax.- Stable, been around for a while. Will have to learn more about the tooling, starting to get very comfy with foundry tho so not sure how annoying it would be to rely on an FFI-based loader.
15
5
74
Wait until the Rust people discover Haskell, then we'll have the true web3 infra renaissance.
23
2
74
TIL: The console.log address in hardhat/foundry is "console.log" in ascii-hex
2
1
75
Flight booked!. I'm going to EthCC 🇫🇷. Don't have a ticket for the main venue yet but will definitely be at side events and the DeFi security summit 😁.
10
0
74
Day 2 of learning Rust 🦀. - Read more of the Rust book (ownership basics, skimmed some other sections).- Did half of Rustlings (at 51/95).- Did Advent Of Code 2022 Day 2 in Rust: (feel free to roast my code again).
8
1
72
I think this Vyper 0day is less about the skill of the Vyper team or the language itself but more about *processes*. The bug was a fixed many versions of Vyper ago, the actual oversight was not realizing the potential impact to projects at the time it *was* fixed.
10
7
69
One of @solidity_lang's most annoying features is the fact that you can't mix assignments and variable definitions when unpacking a tuple. Like you can't do `(x, uint256 y) = myLib.fn()`.
14
2
70
Need something to chew on in-between talks or on your flight back?. 🏁 Try the Huff CTF challenge I wrote for a competition here:. The provided stack comments and the foundry debugger are your friends. 🛠️. Good luck 🕵️.
5
15
69
Future of "gasless" events wdyt?. 1. Very little runtime overhead ~21-25 gas.2. Shared indexing logic (literally part of contract bytecode).3. Easy for indexers to run (have direct comparison of randao with our magic constant return true, track calls to 0x6942, set codesize = 1)
18
2
69