Good writing krub, Cheers. จริงๆ InsecureAirdrop Contract อนุญาติให้ทั้ง user และ smart contract สามารถมา claim airdrop ได้ครับ แต่ถ้าเป็น contract จะมีการเช็ค compatibility เพิ่มเติมเพื่อเช็คว่า contract นั้นรองรับการรับ airdrop หรือไม่ นอกนั้นเขียนได้ถูกต้องทั้งหมดเลยครับ สรุปได้เยี่ยมมาก

This post points to the article I wrote for Valix Consulting. The article analyzes the incident of Twindex’s fractional-algorithmic synthetic asset system exploited on October 2, 2021. The article provides a full analysis explaining all attack details. Moreover, the article also gives remediation solutions to address issues. 🕵🏻 Please check it out here: Twindex — Full Incident Analysis of Flash Loan and Price Oracle Manipulation Attacks.

This post is pointing to the article I wrote for Valix Consulting. The article provides a comprehensive analysis of the Poly Network’s heist incident on August 10, 2021. The heist affected the user assets worth more than $610M, breaking the record to become the biggest heist in DeFi history. The article also gives the recommended remediation in the end. 🕵🏻 Please check it out here: Poly Network — In-Depth Analysis of the Biggest Heist in DeFi History.

This post is pointing to the article I wrote for Valix Consulting. The article exposes our findings toward the design flaws under the inherent voting mechanism of the SUSHI token, which can also affect every forked project to be attacked. The article also gives solutions to remediating its issues in the end. 🕵🏻 Please check it out here: SushiSwap — Voting Vulnerability of SUSHI Token (and Its Forks).

This post is pointing to the article I wrote for Valix Consulting. The article reports the discovery of critical vulnerability on Biswap’s swap function. 🕵🏻 Please check it out here: Biswap — Discovery of Critical Vulnerability on Biswap’s swap() Function. The article is also published at www.serial-coder.com. Happy reading 🧑🏻‍🏫