Field notes / 2022-present
Things I learned by looking closer.
Security findings, audit patterns, build logs, and personal notes. Sensitive source material is edited to keep the lesson without publishing private details.
2 notesNewest first
Smart contracts
Bounded work is a smart-contract invariant
Why attacker-controlled arrays and linear cleanup can turn an ordinary staking path into a permanent availability problem.
soliditydenial of servicegas
Smart contracts
Move state before interactions
A reentrancy case study in loan settlement, stale records, and why checks-effects-interactions is really about temporal truth.
solidityreentrancydefi