We look at the Flashbots Protect product and test to see if we get MEV’d or if Flashbots protects us from the watchful eyes of hungry mempool sandwich bots. — I read the Flashbots documentation, which seems to tell me two conflicting things.

Security Considerations for Integrating Chainlink Price Oracles — Chainlink allows smart contract developers to receive a wide variety of off-chain data, with the most commonly used features being receiving off-chain randomness and off-chain pricing data. Integrating your smart contracts with Chainlink provides a unique set of potential security vulnerabilities that attackers can exploit; here are the common vulnerabilities…

Origin Story: Birth of Solodit — One morning in April 2022, my life changed. Over a warm latte, I heard an exciting story from a friend. He spoke of someone earning a jaw-dropping $2,000 an hour. I needed a new challenge, and this was my ticket out of boredom. I spent hours reviewing Christoph Michel’s blog…

Uncovering an (Almost) Out-of-Scope Mainnet Bug — Cyfrin recently conducted a comprehensive security review of Sudoswap v2 over three weeks. A total of 20 issues were found, including three high-risk and four medium-risk. This article explores the audit’s findings and the techniques used to uncover them. Sudoswap is an NFT marketplace protocol that allows for a wide…

What is Chainlink CCIP (cross-chain interoperability protocol)? How is it an improvement over current smart contract bridges? What are the risks of working with cross-chain? — If you look at the DeFi hack leaderboard, you’ll see a staggering nearly $2.5 billion stolen from cross-chain applications.

Smart contract audits are getting easier. — Get your profile set up now. Be ready to fly with Codehawks when the first contest starts. 🦅 Kaw! Kaw! In today’s Decentralised Finance (DeFi) world, security has increasingly become a concern for developers and users alike. According to ChainAnalysis, in 2022, out of the ~$44 billion circulating in DFI…

In-depth Incident Analyses — We at Cyfrin are excited to launch a new initiative called the Hack Series. This series aims to conduct in-depth analyses of previous hacks or high-risk Immunefi submissions from a security standpoint. Our goal is to discuss the vulnerabilities and perform forensic analyses of what led to those vulnerabilities and…

Creating and verifying zero-knowledge proofs in solidity — Zero Knowledge Proofs enable a Prover to demonstrate knowledge of something to a Verifier without revealing that knowledge. For example, if we want to prove that we have solved a puzzle without giving away the solution, we can use Zero Knowledge Proofs. How does this relate to Smart Contracts? Imagine a Solidity smart contract called Sudoku …

The Invariant test suite we created for the security audit mentioned in this article is available on GitHub. To learn more about smart contract security and smart contract audits, visit Cyfrin.io. A list of our public audit reports can be found here. Neo taught us that there are two realities: …