When a live vulnerability may be exploited
The answer to whether or not you should exploit bugs in mainnet protocols is always no. Except, for these two situations where it may be needed..
Heyo,
Jules here, from Cyfrin.
3 months ago, we launched Cyfrin Updaft in closed beta because we wanted to give you an amazing experience.
Since then, we have received:
70,000+ applications
11,000+ early access students
2000+ feedback
Today, we’re happy to announce we’re opening Cyfrin Updraft, the ultimate web3 education platform, to everyone for free! 🚀
This week
✍🏼 What to do if you find a bug in a live code?
📆 Cyfrin ecosystem updates
📚 Auditor roadmap, web3 tools, and oracle manipulation attacks
What to do if you find a bug in live code?
You found a bug in a live smart contract. The clock is now ticking. What to do?
🙅🏻♀️ Firstly, do not exploit it. There could be legal ramifications. There are two exceptions to this rule:
A malicious exploit that is already in the mempool.
There is a safe harbor agreement.
🤷🏻♀️ So, what should you do?
Get in contact with the protocol, bug bounty platform, or whoever is responsible for owning the codebase.
Make sure you’re communicating on a secure line.
Prove the bug exists.
Come up with a fix.
Roll out a post-mortem.
— Read more about white hatting smart contracts here!
This week at Cyfrin
🎨 This week, we published the new Cyfrin website giving our brand a full revamp.
🏆 The Vyper contest is done! Congrats to Kuro from Binance Security Team for winning top place with a $50,000 reward.
🚀 Dolomite Margin is a composable margin trading and lending protocol running on Arbitrum. Here’s what we learned from auditing their protocol.
Related articles
✍🏼 Here are the top 5 web3 developer tools for 2024 to help you speed up your workflows and allow you to code.
⚡️ Here’s everything you need to know about one of the most common crypto attacks in recent years - oracle manipulation attacks .
👩🏻💻 Want to become a smart contract auditor? Here’s a full roadmap.
Let us know what you think about this newsletter here!
Sending lots of cyber love,
Jules 🤸🏻