สำหรับเวอร์ชั่นภาษาไทย สามารถอ่านได้ที่: https://inspexco.medium.com/th-paradigm-ctf-2022-writeup-ae7b6a86fcec Inspex team members participated in Paradigm CTF 2022 on the _C0FFEE team and ranked 15th from a total of 445 teams with a total score of 2,465.1.

The Inspex Library has made significant improvements to its aesthetics and ease of use and can also display more detailed audit information. Inspex Library is a smart contract audit dashboard that collects smart contract audit results in one place. …

There are currently a lot of solutions that have been introduced to solve the Ethereum scaling and gas pricing issues. Rollups is a layer 2 blockchain solution that is used to improve the scalability by operating the computational part on layer 2, while storing the data on layer 1. …

Wintermute was engaged by the Optimism Foundation for liquidity provisioning services on the $OP launch. On May 27, 2022, 20 million $OP was allocated to Wintermute from the Foundation’s Partner Fund. However, Wintermute later found that they could not access these tokens because they had provided an Ethereum (L1) multisig…

สำหรับ Decentralized Application (DApp) ต่าง ๆ การพัฒนา smart contract ให้มีความปลอดภัยนั้นเป็นสิ่งสำคัญอย่างมาก แต่นอกเหนือจากนั้น off-chain component อื่น ๆ (ส่วนของการทำงานที่อยู่นอก Blockchain) ก็มักถูกใช้งานร่วมกับ smart contract เพื่อให้บริการกับผู้ใช้ด้วยเช่นกัน ซึ่งในหลาย ๆ ครั้ง แม้ว่า smart contract จะได้รับการตรวจสอบความปลอดภัยอย่างดีแล้ว แต่แพลทฟอร์มกลับถูกโจมตีผ่านทาง off-chain component ก่อให้เกิดความเสียหายเป็นมูลค่ามหาศาล ตามที่เห็นได้จากหลากหลายตัวอย่าง ไม่ว่าจะเป็น:

Introduction to End-to-End DApp Security Assessment Service For Decentralized Applications (DApp), developing smart contracts securely is one of the most critical parts. Nevertheless, off-chain components are also frequently used together with smart contracts to provide further functionalities for the users. In many occurrences, even when the smart contracts are properly assessed or audited, the platform can still…

Since the inept of smart contracts, exploits and attacks have always been prevalent in this world of decentralized applications, as can be seen from various sources such as: https://rekt.news/ https://defiyield.app/rekt-database Unlike traditional software that can be easily patched, most smart contracts cannot be modified after they are deployed, and allowing…

On Apr 02, 2022, 11:04:09 AM UTC (block 14506359), the attacker borrowed assets from Inverse Finance using a collateral asset that had less actual value than the borrowed assets. The price of the collateral asset on Inverse Finance becoming more expensive at the time, making $INV collateral with more borrowable…

Reentrancy attack is one of the most common attacks on EVM-based smart contracts. It is an attack with devastating damages, which can be seen in many past incidents such as: The DAO attack Cream Finance attack Most reentrancy attacks are done by reentering the same function (Single Function Reentrancy) it…