adrianhetman

Tech Lead at Immunefi. Cyberpunk👾 and LunarPunk🌖

The Dark Side of 'Code is Law': How This Approach is Sabotaging Web3

The "code is law" concept, often attributed to American lawyer and scholar Lawrence Lessig, has gained traction in the blockchain and smart contracts realm. This notion posits that the code governing interactions within decentralized systems is the ultimate authority, superseding any other legal or ethical considerations. Although this idea may

metaverse Featured

Fight for Metaverse has just began

When I became a dad a week ago, I realized that my kid would grow up with the Internet so much different than what we have now, the Internet, where things we build today will be taken for granted. The Web so intertwined more with our lives today than it

Can a secure bridge be a reality ?

Every bridge is different in how they operate and how they are designed. That means there isn't any one clear way to create and maintain such a bridge. We don't have any standards that the industry can use and copy. We're in the uncharted waters where new designs are being

Intro to Cross-chain bridges and its security

Blockchain enables various opportunities for its users. There are many takes on how blockchain should behave and what it should offer. We see many blockchain networks in active use, like Ethereum, Polygon, NEAR, Avalanche, BSC, or Solana, each with its own value proposition. As users (and money) pour into DeFi,

DeFi

Monthly DeFi Blood Bath Report #5

Welcome to another instance of the Blood Bath report. This months we saw a fix of critical bug in OpenZeppelin [https://forum.openzeppelin.com/t/uupsupgradeable-vulnerability-post-mortem/15680] , a Supply Chain attack on SushiSwap and just yesterday we saw a Compound proposal that went wrong [https://www.rekt.news/overcompensated/]. Enough

audit

Why audits shouldn't be used for marketing purposes

DeFi space is growing strong and steady. TVL is growing even faster, but also the stolen value from DeFi protocols. According to DeFiPulse, the Total Value Locked in DeFi projects is roughly $90.16B. Hacks keep happening even though more projects are getting audited. For me, who audits smart contracts

hacks

Monthly DeFi Blood Bath Report #4

Welcome to another instance of the Blood Bath report. This month was the craziest one in the whole DeFi history due to two events: the Poly Network hack and Samczun’s Whitehack of Sushiswap. This month we saw some big hacks, even excluding PolyNetwork. But what is also important, we

personal

Importance of taking a vacation

I'm back! So good to be back and writing again. As you may have noticed (or not), I was gone for 16 days. I went with my wife on vacation to Portugal. I'm not saying this to brag but to explain why it is essential to take a more extended

blog journey Featured

100 days of daily blogging

Can't believe I'm typing these words, but today marks the 100th day of my daily blogging challenge! I made it 😭 I can't believe it, but I made it! It was one hell of a journey that I would definitely do again! I met amazing people along the way that I

news Featured

How to stay up to date with BlocSec news?

Being an auditor is not an easy job. There’s a lot of pressure on us to do our job perfectly. If we don’t, and we miss something, millions are on the line. It’s a bit different than standard web security, where there can be breaches and databases

news

China/US crypto news #1

Recently there was a lot of happening in the China and US, crypto wise, from different policy makers. The Central Bank of China declared it will continue its high pressure on different virtual currency trading. USA on the other hand decided to start its own crackdown on crypto exchanges and

auditing Featured

Why is self-auditing a bad idea?

While scrolling through Twitter, I stumbled upon this tweet from Ashton Kutcher. > We’re auditing ourselves. We followed the industry standards and haven’t found any glitches. But, we believe we should hold ourselves to higher standards. We learned a lot and are going to write it all up and

DeFi

Monthly DeFi Blood bath report #3

Welcome to another instance of Blood bath report. This month we saw many bridges burning and some questionable design decisions that led to hacks. Let’s dive into the topic. Below you will find a summary of all hacks that had happened. All info was compiled from openblocksec [https://github.

auditing

Do you need to know programming to work as an auditor?

Yes . . . . . . I get this question lately a lot. My answer to this is Yes, profound Yes. Without programming knowledge, you wouldn't know what parts of the system to check, how to check them, etc. In Ethereum, you have few options to chose from. Solidity is the most popular smart contract

work

How to avoid burnout at work?

Take a break and take vacations. That's what I'll be doing starting next Friday. I've been burn out before. I was feeling tired all the time, my motivation to work dropped, I lacked energy, and it was hard for me to concentrate. It's hard on you, and I witnessed this

blog journey

93 days of daily blogging

I got into the frenzy of writing. I didn't notice I already passed 90-day mark. That means in one week, I will finish 100 days of daily blogging. I will hold my emotions till then but man (or woman)! What an incredible time it has been and still is. It

tutorial Featured

How to become smart contract auditor?

I would like to tell you it's an easy route to become one, but it isn't and there isn't a single path you need to take to become one. But there are multiple things you should do to increase your chances. First thing would be to understand basics very well.

Featured

How to start in Blockchain as a Dev?

As a software developer, you have by far the most possibilities for professional growth and opportunities. No matter in which direction you want to go, either as a Full DApp developer, Smart Contract Developer, FrontEnd/BackEnd, Protocol Engineer, etc. I will recommend the same start for any of you. Ethereum.

security

Security should be the number one priority

Dust didn't settle after the ThorChain was hacked yesterday. It was an interesting hack, but the reason it was possible was due to business decisions. Following last week's hack, Thorchain said it had been audited by multiple blockchain security companies to locate bugs in a given network. In a CoinDesk

tutorial Featured

Unboxing tx.origin. Rune Token case

Today we saw how ThorChain protocol get rekt on multiple levels. First we saw a black-hat attack the protocol and steal $8M. > THORChain has suffered a sophisticated attack on the ETH Router, around $8m. The hacker deliberately limited their impact, seemingly a whitehat. ETH will be halted until it can

personal

How scheduling and taking notes can save you from yourself

It’s 11:19 PM when I’m starting to write these words. I’m just finishing my work for today. It’s been a tough day, as you can see. I started writing another article, this time about how to start as Ethereum Dev. After the first paragraph, I

DeFi

DeFi double-edge sword problem

What DeFi does that traditional financial institution doesn't is democratizing the access to financial instruments for everybody with internet connection and become community-owned. Currently, the most prominent DeFi products are being built on Ethereum. They are utilizing its robust smart contracts system. Smart contracts are composable, which means they can

New DCEP's white paper has been released

Few days ago, Central Bank of China released a white paper for DCEP. > Breaking: The Central Bank of China released a white paper on Digital CNY (DCEP), emphasizing that one of the reasons for the launch is the challenge of cryptocurrency, and it will load smart contracts to achieve programmability.

personal

Sleep well

I've fallen again into the trap of working late and not sleeping well. I've written about this subject, but somehow I didn't listen to my advice for the last two weeks, and I didn't sleep long enough. Auditor work isn't an easy job, and it can be pretty stressful. I'm

hacks Featured

Replay Mirror Attacks

DeFi is an ever-growing market, and apart from everybody wanting to have a piece of multi-billion dollar industry, there are chains and copycats of protocols found originally on Ethereum. Some of those copycats grew into their respective applications, but also it meant, we have multiple chains we can deploy the