HashingBits

Straight from the QuillAudits war room, HashingBits brings you weekly Web3 security alpha—hacks, insights & updates for the sharpest minds in the game!

Dec 23 • 5 min read

HashingBits Week 98: Sonic Mainnet Live, Base’s Spend Permission & LABUBU Token’s Exploit


GM! BUIDLers

In this latest issue of HashingBits, we’re diving deep into Ethereum’s Core Developers meetings, covering all the major updates in the Ethereum ecosystem. But that’s not all—we’ll explore the latest happenings in the Aptos, Base. Sonic ecosystems, along with advancements in the AI & Web3 space. For developers, we’re highlighting new tools designed to assist smart contract developers and auditors. Also we are taking a look at the recent $501k+ exploit of Clober DEX due to reentrancy attack.

EtherScope: Core Developments 👨‍💻

L1 & L2 Developments

  • Levva’s $LVVA Token Generation Event is live through Fjord Foundry.
  • Wormhole is now live on Berachain’s testnet.
  • Ethena Labs’ USDe and sUSDe are now live on Swell.
  • Dinero introduces iETH, a native ETH liquid staking token (LST) for Ink, powered by LayerZero. iETH is now live for staking.
  • Covalent is now live on Ink mainnet.
  • Pencils Protocol launches Pencils DEX, a decentralized exchange designed to maximize liquidity.
  • Hyperlane is now live on Swellchain, enabling asset bridging for protocols like Renzo Protocol’s ezETH and pzETH.
  • sBTC is live on Stacks Mainnet, enabling Bitcoin DeFi with 1:1 BTC backing, institutional signer networks, and Bitcoin finality.
  • Tren Finance’s Liquidity Generation Event (LGE) launches on December 17th to support its Arbitrum mainnet.
  • Sonic Labs has launched its mainnet explorer, powered by Etherscan, allowing users to explore blocks ahead of the public launch.
  • Jumper has launched Jumper Wrapped, showcasing your year on-chain, including top swaps, explored chains.
  • Pendle has launched new Aave pools for aUSDC and aUSDT (expiring June 26, 2025) on Arbitrum and other networks.
  • Data Always: role of MEV-Boost relays in reorgs
  • EIP7732 ePBS breakout #14: rebasing to Pectra, targeting interop for end of January
  • Sophon Mainnet is live, introducing the first Validium on zkSync, powered by Avail Project.
  • Ink is now live on mainnet, launching ahead of schedule as part of the Optimism Superchain.
  • Jupiter launches JupiterZ, featuring a unique RFQ model for Solana that enables gasless swaps and 0% slippage with a simple toggle.
  • Resupply introduces a new decentralized stablecoin protocol, developed by Convex Finance and Yearn Finance.
  • Scroll integrates Yellow, a decentralized Layer-3 peer-to-peer mesh network, enabling seamless swaps, cross-chain liquidity, and an intuitive trading experience.
  • Drift launches Drift Vaults on Solana, offering 20+ high-yield trading strategies with one-click access.
  • Resolv Labs’ USR-USDC pool is now live on AerodromeFi, offering low slippage and strong liquidity for traders on Base.
  • Pendle and Fluid introduce Fluid USDC and Fluid USDT (June 26, 2025), enabling yield speculation with Pendle’s PT and YT.
  • Gas limit signaling dashboard, 20% of validators signalling to increase
  • Coinbase validators signaling for an increase to 36M
  • Terence: inclusion list committee selection approaches compared

EIPs

ERCs

  • ERC7842: State channel data types & interfaces
  • ERC7844: Consolidated dynamic storage
  • ERC7845: Minimal orchestrator RPC
  • ERC7846: Wallet connection API
  • ERC7847: Social media NFTs

EcoExpansions: Beyond Ethereum 🚀

Aptos

Base

Sonic

Hackathons, Workshops, CTFs & Events

Updates on Development Kits & Tools

  • Besu v24.12.2: hotfix for users of account state overrides in eth_call
  • Erigon v3.0.0-alpha7: faster eth_getTransactionReceipt and return PrunedError when reading unavailable historical data
  • Lighthouse v6.0.1: patch for minor issues in v6
  • Lodestar v1.24.0: adds engine_getBlobsV1 support to get blobs from execution layer and adds experimental keymanager endpoint
  • Prysm v5.2.0: QUIC enabled by default, adds engine_getBlobsV1 support and fix for using MEV-Boost with a gas limit increase
  • Teku v24.12.1: bug fixes
  • Forge-std v1.9.5: adds get broadcast cheat codes, mock call overloads and count for expect emit/revert

Explore the Depths of Knowledge: Research Papers, Blogs and Tweets🔖

Twitter

Articles

Research Papers

video previewvideo preview

Web3 Security

Articles

Research Papers

Twitter

Hacks and Scams 🚨

LABUBU Token

To know more about the exploit in details, check the post-mortem report.

Community Spotlight

twitter profile avatar
QuillAudits | Web3 Security 🛡️
Twitter Logo
@quillaudits_ai
6:52 PM • Dec 18, 2024
3
Retweets
15
Likes

QuillAI Network is Pushing Boundaries

The QuillAI Network is the AI layer for web3 security. In their mission to create a safer web3, QuillAI features an OML-aligned framework incentivising developers and users to build self-sovereign AI agents for dedicated tasks through the fine-tuning of its D-LLM. With agents for solidity (QuillShield) and due diligence (QuillCheck) helping safeguard contracts, transactions, and wallets, QuillAI is empowering web3 users and builders to charge of their security needs.

Stay ahead of security risks and safeguard your assets with comprehensive, real-time risk assessments now across five major blockchains.

Copyright (C) 2024 QuillAudits. All rights reserved.
You are receiving our newsletter because you opted-in for it at one of our websites.

Our mailing address is:
QuillAudits Office 104/105 Level 1, Emaar Square, Building 4 Sheikh Mohammed Bin Rashid Boulevard Downtown Dubai, United Arab Emirates

Unsubscribe · Preferences


Straight from the QuillAudits war room, HashingBits brings you weekly Web3 security alpha—hacks, insights & updates for the sharpest minds in the game!


Read next ...