Security - 0xjarix

0xjarix

Security

A collection of 3 posts

If I had to start again

If I had to start again

This is a roadmap I would follow if I had to start my journey as a security research from scratch today with 0$ and no prior experience in blockchain or tech whatsoever: * If you're new in the tech field I would advise to take this course: https://pll.

Audit checklist

Audit checklist

* understanding the project as a whole (docs + code) * doc/code discrepancy (compare them carefully) * read previous reports (devs commit the same vulnerabilities even though it’s a different codebase, learnt it the hard way when decided against participating in midas second contest: https://github.com/sherlock-audit/2024-08-midas-minter-redeemer-judging/issues and https:

Who's Calling?

As you know there are two types of accounts in ethereum, externally owned accounts(EOA) and contracts. There is absolutely no way of knowing if an address is that of an EOA or that of a contract just by looking at the 20-bytes address. Sometimes, we want the address making