gilbert

@0xgib

113 Following

570 Followers

harsh pfp

We’ve audited Farcaster, Maker, Thirdweb, Compound, and more. Now expanding to SVM (Solana) audits at Macro. My cofounder @0xgib is offering steeply discounted Solana audits ($5k/wk) as we build our SVM track record. Who’s in? dm or reply plz.

1 reply

8 recasts

24 reactions

gilbert pfp

Anchor protects against this with their `#[account(close = <address_to_send_lamports>)]` feature

0 reply

0 recast

2 reactions

gilbert pfp

When transferring all SOL out of an account on Solana (aka "closing" the account), the account doesn't actually get removed until the end of the transaction. Done naively, this allows attackers to reuse or reinitialize the account, potentially draining funds from the protocol 🫢

1 reply

3 recasts

10 reactions

gilbert pfp

Solana's official "Token Program", released in 2020, serves as an "ERC-20"-like program for creating fungible and non-fungible tokens. Interestingly, a new "Token-2022 Program" was developed, stemming from an issue with Solana's programming model.

0 reply

1 recast

6 reactions

gilbert pfp

it's acting at the rust compiler level, so that would be the source code layer

0 reply

0 recast

1 reaction

gilbert pfp

Solana programs do not have overflow/underflow checks on by default. You must enable them by setting `overflow-checks = true` in your Cargo.toml

1 reply

0 recast

1 reaction

gilbert pfp

Meant to post this in this channel:

0 reply

0 recast

2 reactions

gilbert pfp

Right, I didn't mean it works out technically. Completely agree it's a ticking time bomb

0 reply

0 recast

1 reaction

gilbert pfp

I guess it works out since the costs to participate in consensus is so high, weirdly enough.

1 reply

0 recast

1 reaction

gilbert pfp

Update: Solana does still not have slashing implemented

2 replies

0 recast

7 reactions

jesse.base.eth 🔵 pfp

jesse.base.eth 🔵

39 replies

296 recasts

838 reactions

gilbert pfp

just got back to austin. why is it still hot

0 reply

0 recast

10 reactions

gilbert pfp

It's time to start casting again

0 reply

0 recast

2 reactions

gilbert pfp

Thanks for the response, y'all are awesome 🔥

0 reply

0 recast

0 reaction

gilbert pfp

Hey @v sorry for the ping but my friend's casts are not showing up in any channels. Did he get shadowbanned or something?

1 reply

0 recast

0 reaction

gilbert pfp

How is it that this song is so iconic? It feels as if it's a classic that's hundreds of years old. Randomly gets stuck in my head many times over the years

1 reply

0 recast

1 reaction

gilbert pfp

What about sub 1k @harsh 👀

0 reply

0 recast

1 reaction

gilbert pfp

I can't seem to find this cast that was posted /founders recently. Bug? https://warpcast.com/harsh/0x190e3716

1 reply

0 recast

2 reactions

gilbert pfp

Color is so extremely contextual that more than one shade is necessary to get consistent looks across different contexts. This is a case where 1 + 1 does not equal 2

1 reply

0 recast

1 reaction

gilbert pfp

I wouldn't say it's better or worse, just very different. It certainly feels more complex though

1 reply

0 recast

0 reaction