Smart Contract Security and Development
EVM
Joined November 2023
- Tweets107
- Following42
- Followers414
- Likes463
Solidity Labs retweeted
Announcing Forge Proposal Simulator v1.0.0 🎉
FPS is a Foundry framework for building, simulating, validating, and reviewing governance proposals before they go onchain. Governance transactions are high-stakes and often difficult to test end to end.
Next up: we're going to see what the AI auditor can find in the @forgepropsim codebase!
We also benchmarked the @zellic_io AI auditor, compared it to Certora, as well as open source models, claude, and codex.
Full results and benchmarks are available github.com/solidity-labs-io/…
The AI auditor ended up flagging a medium that two audits missed. A malicious proposal can permanently brick the timelock by setting the expiration period to uint256 max, which stops all future and current proposals from being executed.
We ran the auditor mode against the @KleidiWallet codebase benchmarked at the commit before our @code4rena audit.
@Certora recently launched their newest AI Auditor, and we wanted to try it out.
When tested against a codebase our engineers developed, it surfaced a unique vulnerability two rounds of audits missed!! Let's dive in.
Solidity Labs retweeted
@forgepropsim (FPS) was part of @TheDAOfund's Ethereum Security QF round on @Giveth, the largest QF matching pool ever.
This year FPS has been used to simulate 57 governance proposals across 4 protocols, protecting $191M in TVL. Every one reached the chain only after passing offchain testing, onchain simulation, and calldata verification.
Solidity Labs retweeted
FPS was part of @TheDAOfund's Ethereum Security QF round on @Giveth, the largest QF matching pool ever.
This year FPS has been used to simulate 57 governance proposals across 4 protocols, protecting $191M in TVL.
MIT license.
No token.
No revenue model.
Fully OSS since 2023.
Funding goes to maintenance, docs, hiring and marketing.
FPS exists because governance proposals are an often overlooked attack surface neglected by existing tooling. Incorrectly configured deployment scripts, Supply chain attacks, compromised developer machines...
These bugs don't show up until the proposal lands onchain.
@OlympusDAO made FPS mandatory for all governance proposals. Collectively, protocols using FPS govern over a billion dollars in TVL.
github.com/OlympusDAO/forge-…
Forge Proposal Simulator is now on @Giveth for the Ethereum Security QF Round. Support open-source governance security tooling: giveth.io/project/forge-prop…
Solidity Labs retweeted
.@SolidityLab is a boutique consulting firm that helps build cutting edge smart contract protocols. Founded by @Elliot0x.
Now hiring in SF, remote (Americas)!
⚡️ Senior Smart Contract Engineer
Apply now 👇
cryptocurrencyjobs.co/engine…
We are hiring smart contract engineers!
Our acceptance rate is under 0.5%.
We only hire the best of the best.
.@SolidityLab is a boutique consulting firm that helps build cutting edge smart contract protocols. Founded by @Elliot0x.
Now hiring in SF, remote (Americas)!
⚡️ Senior Smart Contract Engineer
Apply now 👇
cryptocurrencyjobs.co/engine…
Solidity Labs retweeted
Eth/Acc
The very first OEV transaction that used @Paradigm research from @DanRobinson and @_Dave__White_ just happened on @Optimism in a completely onchain and transparent auction.
This is historic and demonstrates you can build onchain systems that are more fair than offchain.
The @Paradigm research that led to this breakthrough in the lending space: paradigm.xyz/2024/06/priorit…
The @MoonwellDeFi governance proposal that activated the first fully onchain and decentralized OEV auction using this research: moonwell.fi/governance/propo…
Solidity Labs retweeted
🌜🔴🌛 First Superchain OEV Auction Takes Place on Moonwell!
Moonwell contributor @SolidityLab's OEV solution brings onchain liquidation auctions to Moonwell, maximizing protocol revenue while maintaining the highest standards of security and decentralization.
Learn more: ⬇️
Eth/Acc
The very first OEV transaction that used @Paradigm research from @DanRobinson and @_Dave__White_ just happened on @Optimism in a completely onchain and transparent auction.
This is historic and demonstrates you can build onchain systems that are more fair than offchain.