Contrôle et preuves · 2016 onward
DAO governance: follow the vote all the way to execution
A public vote can be transparent while power remains concentrated in delegation, proposal rights, upgrade keys or execution.
Enquêtes · Histoire · Références
Toutes les entrées A–Z · 5 / 15
438 · Articles et références
DeFi et gouvernance
DAO governance: transparent votes can still concentrate power
Proposal rights, quorum, delegation and execution determine who can direct the assets.
Comprendre les blockchains
Data availability
Participants need transaction data to reconstruct state and exit.
Infrastructure et propriété · Modular blockchain design
Data availability, historical storage and the limits of a hash
A commitment can authenticate data without supplying it. Publishing data now and preserving it for years are related but different jobs.
Comprendre les blockchains
Data availability: can the state be independently reconstructed?
A commitment identifies data; availability determines whether the required data can be obtained.
Types d’arnaques
Deepfake executive livestreams
Generated video or copied broadcasts impersonate a public figure.
Origines et histoire · 2018–2021
DeFi’s expansion: pooled liquidity, collateral and rented activity
Automated markets and token incentives changed how users could provide capital, and made headline growth harder to interpret.
Portefeuilles et sécurité
Delegatecall authority
Delegatecall runs another contract's code in the caller's storage context.
Types d’arnaques
Discord account takeovers
A compromised team or moderator account publishes an emergency link.
KOLs et promotion
Discounted OTC tokens promoted at market price
An influencer buys below market and promotes into public demand.
Structure de marché
Divergence loss: what a liquidity position gives up relative to holding
Fee income and inventory changes must be evaluated together.
Histoire crypto
DMM Bitcoin, 2024: a recruitment lure reached a custody workflow
The official attribution follows a fake coding test through session impersonation to a manipulated transaction request.
Types d’arnaques
DNS hijacking
Domain records are changed so a real name resolves to attacker infrastructure.
Comprendre le Web
DNS: the name is part of the security boundary
A familiar domain must still resolve to the intended service.
Noms, identité et contenu web
DNSSEC and HTTPS: two checks behind a wallet website
Authenticated name resolution and encrypted transport do not certify a financial application.
Types d’arnaques
Dust-token message scams
A token name, NFT description or tiny transfer contains a malicious URL.
Comprendre les blockchains
Economic and protocol finality
Finality defines when reversal becomes impossible or economically exceptional.
Comprendre les blockchains
EIP-1559 base fees
Ethereum burns a protocol base fee that adjusts with block utilisation.
Comptes intelligents et gouvernance
EIP-4788: a beacon root is a commitment, not the whole beacon state
Ethereum exposes a consensus-layer commitment to contracts; the proof and interpretation still need work.
Comptes intelligents et gouvernance
EIP-6963: choosing between browser wallets without trusting the icon
Provider discovery solves a coordination problem; names and icons remain self-reported.
Portefeuilles et sécurité
EIP-712 domains: what stops a signature travelling to another application?
Readable fields help, but the signed domain and replay controls still matter.
Portefeuilles et sécurité
EIP-7702: delegation deserves its own review
An account upgrade can change the code used when your address is called.
Noms, identité et contenu web
ENS names: why a reverse record needs a forward check
A readable name improves navigation only when the address relationship is verified.
Portefeuilles et sécurité
ERC-1155: one operator approval can cover many token IDs
An approval for a collection contract is broader than permission for the item pictured on a page.
Portefeuilles et sécurité
ERC-1271: a contract decides whether a signature is valid
Smart-wallet signatures depend on validation logic and state, not only public-key recovery.
Méthodes de recherche
ERC-165: interface support is a claim, not a security certificate
A contract recognising a function set does not prove that its implementation behaves honestly.
Portefeuilles et sécurité
ERC-1967: finding the implementation behind a proxy address
The address users recognise can remain unchanged while the code they execute changes.
Portefeuilles et sécurité
ERC-2612: a permit deadline is not an allowance expiry
The time limit governs submission of the signature, not necessarily the life of the resulting approval.
Portefeuilles et sécurité
ERC-4337: programmable accounts without assuming one private key is enough
Bundlers, account validation and optional paymasters split a transaction flow into distinct responsibilities.