DeFi y gobernanza
ERC-4626: a vault share is not an immediately withdrawable balance
Read conversion rates, fees and withdrawal limits as separate quantities.
Investigación · Historia · Referencias
Todas las entradas A–Z · 6 / 15
438 · Artículos y referencias
Cuentas inteligentes y gobernanza
ERC-6492: signatures from an account that is not deployed yet
An empty address can have a planned contract identity; verification must follow the correct model.
Cuentas inteligentes y gobernanza
ERC-7579: wallet modules are part of the authority map
Validators, executors and hooks have different powers inside a modular smart account.
Métodos de investigación
eth_getProof: check the state, then check the root you trusted
Account and storage proofs can make an RPC answer verifiable, but they do not choose the canonical chain for you.
Redes y cadenas
Ethereum: applications share a settlement system
ETH, smart contracts and tokens have distinct roles and distinct risks.
Historia cripto
EthereumMax paid promotion
Kim Kardashian settled SEC charges over an undisclosed $250,000 payment to promote EthereumMax.
Historia cripto
Euler donation-to-reserves exploit
Euler was exploited in 2023 through interactions involving lending positions and its donation mechanism.
Fundamentos de blockchain
Events and transaction logs
Contracts emit indexed logs consumed by wallets and explorers.
Métodos de investigación
Evidence snapshots: make a finding reproducible
A claim needs enough context to survive a changed interface.
Fundamentos de blockchain
EVM account state
Ethereum tracks balances, nonces, code and contract storage.
Estructura de mercado
Exchange mark-price discretion
A venue liquidates from an index or mark instead of the last trade.
Tipos de estafa
Fake airdrops and claim pages
An unexpected asset can be an advertisement for a malicious website.
Tipos de estafa
Fake bridge interfaces
A clone accepts approvals or deposits without a valid destination route.
Tipos de estafa
Fake browser extensions
A malicious extension appears beside a legitimate wallet in store or search results.
Tipos de estafa
Fake crypto recruitment tests
A supposed employer asks an applicant to install software, clone a repository or run a coding task.
Tipos de estafa
Fake exchange deposit pages
A clone shows plausible balances after funds reach attacker wallets.
Tipos de estafa
Fake exchange-listing announcements
A promoter claims a large venue will list a token at a fixed time.
Tipos de estafa
Fake law-firm recovery
A website copies lawyers, regulators or investigators and claims seized assets await release.
Tipos de estafa
Fake listings and borrowed exchange credibility
A screenshot of an announcement is easy to copy and difficult to date.
Tipos de estafa
Fake MEV-bot contracts
A supposed MEV system advertises passive sandwich or arbitrage income.
Tipos de estafa
Fake NFT mints
A promoted mint asks for broad permissions or transfers unrelated to the purchase.
Tipos de estafa
Fake partnership announcements
A token uses a recognised company's logo or a minor vendor interaction as a partnership.
Tipos de estafa
Fake proof-of-reserves claims
A provider publishes selected wallet balances without complete customer liabilities.
Tipos de estafa
Fake support screen sharing
A supposed support agent asks to watch or control the screen.
Tipos de estafa
Fake support: urgency with borrowed branding
Impersonators appear where users are already looking for help.
Tipos de estafa
Fake token presales
A project collects funds before a usable market or product exists.
Estructura de mercado
FDV as a valuation weapon
A tiny float sets a price multiplied across the entire supply.