|
GM! BUIDLers
In this latest issue of HashingBits, we’re diving deep into Ethereum’s Core Developers meetings, covering all the major updates in the Ethereum ecosystem. But that’s not all—we’ll explore the latest happenings in the Aptos, Base. Arbitrum ecosystems, along with advancements in the AI & Web3 space. For developers, we’re highlighting new tools designed to assist smart contract developers and auditors. Also we are taking a look at the recent $501k+ exploit of Clober DEX due to reentrancy attack.
EtherScope: Core Developments 👨💻
L1 & L2 Developments
- Moonwell launches the Moonwell Card, enabling users to spend crypto globally at 44+ million merchants with support for Apple Pay and Google Pay
- Nexus has launched its testnet, inviting users to contribute computing power to its distributed supercomputer network, aiming to build a verifiable internet.
- Kernel DAO has launched its Mainnet on BNB Chain, offering restaking options for BNB, LSTs, and BTC derivatives, along with Kernel Points (KP) for additional rewards.
- Astorl has launched its Mainnet, introducing capital efficiency on the Eclipse platform. Users can now earn, lend, borrow, and optimize their returns.
- Balancer v3 launches including improved Developer Experience (10x Custom Pool DX), 100% Boosted Pools for optimized yields, and Hooks enabling customizable AMM strategies.
- Pendle launches PendleSwap, enabling multi-coin swaps with the best rates and no extra fees, enhancing DeFi accessibility.
- Kamino launches open access to Swap.Kamino.Finance, offering zero slippage, zero fees, and zero MEV for seamless DeFi trading on Solana.
- Hyperlane introduces Eco Routes, enabling seamless stablecoin liquidity across any chain with easy integration for enhanced cross-chain connectivity.
- Caldera launches Conwai, an Ethereum AI focused rollup live on mainnet, designed to support data processing, model training, and autonomous agents.
- Odos DAO officially launches alongside its Tokenized Loyalty Program, starting December 20, 2024.
- PancakeSwap launches PancakeSwapX on Ethereum and Arbitrum, offering zero trading and gas fees at launch for seamless swapping.
- Clearpool launches Ozean’s Poseidon Testnet, advancing toward on-chain native yield through its RWA-focused blockchain.
- Celestia launches Ginger (v3) on Mainnet Beta, featuring 2x data throughput, 6-second single-slot finality, and 1.33MB/s data capacity.
- Prysm cannot set gas limit through validator client currently
- FOCIL breakout #1: consensus layer spec relatively stable, aim for devnet at end of January
- L1 R&D workshops: notes from pre-Devcon workshops
EIPs
- EIP7839: Unified network configuration (EL to fetch config from CL at startup)
- EIP7840: Add blob schedule to EL config files
ERCs
- ERC7837: Diffusive tokens
- ERC7838: Instruction specific address
- ERC7841: Cross-chain message format and mailbox
EcoExpansions: Beyond Ethereum 🚀
Aptos
Base
Arbitrum
Hackathons, Workshops, CTFs & Events
Updates on Development Kits & Tools
- Safe multisig transaction hashes (Bash script): adds support for offchain message hashes
- Ape v0.8.22 (Python contract framework): 2x faster checksumming, updated isolation and adds support for web3.py v7 & python v3.13
- Heimdall-rs v0.8.5: adds LLM postprocessing to decompiler
- Besu v24.12.0: breaking changes including metric name updates
- Erigon v3.0.0-alpha6: default mode changed from archive to full node, adds minimal prune mode for low disk space users and performance improvements
- Nethermind v1.30.0: default gas limit increased to 36M and adds Taiko & Linea L2 support; v1.30.1: startup fix
- Reth v1.1.3: breaking API changes, adds NodePrimitives (primitive trait abstraction) to several components; v1.1.4: op-reth fix
- Nimbus v24.12.0: adds reading bootstrap nodes yaml
- Teku v24.12.0: block publishing performance improved
Explore the Depths of Knowledge: Research Papers, Blogs and Tweets🔖
Twitter
Articles
Research Papers
Watch🎥
 
Web3 Security
Articles
Research Papers
- Pioplat: A Scalable, Low-Cost Framework for Latency Reduction in Ethereum Blockchain
- BrokerChain: A Blockchain Sharding Protocol by Exploiting Broker Accounts
- Incentivized Symbiosis: A Paradigm for Human-Agent Coevolution
Twitter
Clober DEX
On 10th Dec, Clober DEX Liquidity Vault on the Base network was exploited. The attacker used a reentrancy vulnerability in the _burn function of the Rebalancer contract, stealing 133.7 ETH (~$501K).
The exploit targeted the _burn() function's failure to follow the checks-effects-interactions (CEI) pattern—a key security principle in smart contract design.
Exploit Details:
Vulnerable Contact: basescan.org/address/0x6a0b…
Attacker’s Address:
basescan.org/address/0x012f…
Attack Transaction:https://basescan.org/tx/0x8fcdfcded45100437ff94801090355f2f689941dca75de9a702e01670f361c04
To know about this exploit in detail, read the post mortem.
Community Spotlight
|
QuillAudits | Web3 Security 🛡️
@quillaudits_ai
|
10:59 AM • Dec 11, 2024
|
|
QuillAI Network is Pushing Boundaries
The QuillAI Network is the AI layer for web3 security. In their mission to create a safer web3, QuillAI features an OML-aligned framework incentivising developers and users to build self-sovereign AI agents for dedicated tasks through the fine-tuning of its D-LLM. With agents for solidity (QuillShield) and due diligence (QuillCheck) helping safeguard contracts, transactions, and wallets, QuillAI is empowering web3 users and builders to charge of their security needs.
Stay ahead of security risks and safeguard your assets with comprehensive, real-time risk assessments now across five major blockchains.
|
|
|
Copyright (C) 2024 QuillAudits. All rights reserved.
You are receiving our newsletter because you opted-in for it at one of our websites.
Our mailing address is:
QuillAudits Office 104/105 Level 1, Emaar Square, Building 4 Sheikh Mohammed Bin Rashid Boulevard Downtown Dubai, United Arab Emirates
Unsubscribe · Preferences
|
|
|
