DEV Community

# smartcontracts

Development and analysis of smart contracts.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The $25M Resolv USR Exploit: Why Your Minting Function's Off-Chain Signer Is the Biggest Single Point of Failure in DeFi

The $25M Resolv USR Exploit: Why Your Minting Function's Off-Chain Signer Is the Biggest Single Point of Failure in DeFi

1
Comments
7 min read
The Venus Protocol Donation Attack: How a Dismissed Audit Finding Became a $2.15M Bad Debt — Twice

The Venus Protocol Donation Attack: How a Dismissed Audit Finding Became a $2.15M Bad Debt — Twice

1
Comments
5 min read
The DBXen ERC2771 Exploit: How _msgSender() and msg.sender Confusion Turned 1,085 Staking Cycles Into Instant Cash

The DBXen ERC2771 Exploit: How _msgSender() and msg.sender Confusion Turned 1,085 Staking Cycles Into Instant Cash

1
Comments
5 min read
The $26M Configuration Error: How Aave's CAPO Oracle Misfired — And 5 Oracle Hardening Patterns Every DeFi Protocol Needs

The $26M Configuration Error: How Aave's CAPO Oracle Misfired — And 5 Oracle Hardening Patterns Every DeFi Protocol Needs

Comments
6 min read
The YieldBlox $10M Oracle Poisoning: How One Trade in a Dead Market Drained an Entire Lending Pool — And the 5-Defense Pattern Every Protocol Needs

The YieldBlox $10M Oracle Poisoning: How One Trade in a Dead Market Drained an Entire Lending Pool — And the 5-Defense Pattern Every Protocol Needs

1
Comments
5 min read
Mutation Testing for Solidity: The Audit Quality Metric Your Protocol Is Ignoring

Mutation Testing for Solidity: The Audit Quality Metric Your Protocol Is Ignoring

1
Comments
6 min read
The Aave CAPO Oracle Misfire: How a Timestamp-Ratio Desync Liquidated $26M in wstETH — A Deep Dive for DeFi Builders

The Aave CAPO Oracle Misfire: How a Timestamp-Ratio Desync Liquidated $26M in wstETH — A Deep Dive for DeFi Builders

1
Comments
5 min read
The Legacy Smart Contract Time Bomb: How AI Hackers Are Targeting DeFi's Forgotten Code

The Legacy Smart Contract Time Bomb: How AI Hackers Are Targeting DeFi's Forgotten Code

Comments
7 min read
The Resolv USR Exploit: How a Missing Max-Mint Check Let an Attacker Print $25M From $100K

The Resolv USR Exploit: How a Missing Max-Mint Check Let an Attacker Print $25M From $100K

Comments
6 min read
EVMbench: OpenAI and Paradigm's New Benchmark Proves AI Agents Can Exploit 71% of Smart Contract Vulns

EVMbench: OpenAI and Paradigm's New Benchmark Proves AI Agents Can Exploit 71% of Smart Contract Vulns

Comments
3 min read
OWASP Smart Contract Top 10: 2026 — Reentrancy Falls to #8, Proxy Bugs Enter, and Your New Audit Priorities

OWASP Smart Contract Top 10: 2026 — Reentrancy Falls to #8, Proxy Bugs Enter, and Your New Audit Priorities

1
Comments
5 min read
The 2026 DeFi Pre-Launch Security Checklist: 7 Attack Surfaces Your Audit Probably Missed

The 2026 DeFi Pre-Launch Security Checklist: 7 Attack Surfaces Your Audit Probably Missed

Comments
6 min read
Token Locks: Why Projects Are Using Them (And Why You Should Care)

Token Locks: Why Projects Are Using Them (And Why You Should Care)

Comments
4 min read
Solana Account Revival Attacks: How Closed Accounts Come Back to Haunt You

Solana Account Revival Attacks: How Closed Accounts Come Back to Haunt You

Comments
4 min read
The Venus Protocol Donation Attack: How an Attacker Turned $0.27 THE Tokens Into a $3.6M Payday

The Venus Protocol Donation Attack: How an Attacker Turned $0.27 THE Tokens Into a $3.6M Payday

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.