The ERC20 Short Address Attack Explained
GOLEM's tech team published a nice find today -- a vulnerability for any service that takes user-generated withdrawal addresses and passes them in unaudited to a »
Chronobank: Cool. And a Harbinger.
New Alchemy just started working with ChronoBank and I wanted to highlight a few reasons we are excited to be doing the technical audit work on »
Solidity Frustrations: References and Mapping
Warning, this is a technical post for Solidity developers, others can probably skip it. Memory and Storage and ... Here's a pop quiz I failed today: does »
Do Not Mess With ETH Classic, It Will F You Up
This is a letter sent out to my security/audit clients, but I wanted to publish it, as it is germane to a wide variety of »
Advice for DAO 2.0s
With the Ethereum hard fork successful, it's a good time to take stock. I'm expecting 40% of TheDAO funders to take their money back, crying quietly »