Will Stansill

@stanman

133 Following

569 Followers

Will Stansill pfp

🔍 Day 46 of #100DaysOfBlockchain: Fuzz Testing Unveils Hidden Vulnerabilities Today, I dove deep into fuzz testing, invariants, and handler contracts in my smart contract security course. Focusing on stateful and stateless fuzz testing was both challenging and fascinating. 🛠 What I Learned: I discovered a sneaky issue—a malicious ERC20 token that steals 10% of transfers after the 10th transaction. It was a real eye-opener, showing just how crucial fuzz testing is for catching vulnerabilities that regular tests might miss. 🚀 Why It Matters: While I’m not aiming to become a security researcher, this course is helping me write more secure smart contracts. Today’s lesson highlighted the importance of making sure contracts can handle the unexpected. 🌱 Takeaways: Fuzz testing isn’t just about finding bugs; it’s about building resilient systems. Each challenge I tackle moves me closer to becoming a top-tier smart contract developer.

17 replies

10 recasts

45 reactions

Will Stansill pfp

🔍 Day 45 of 100DaysOfBlockchain: Exploring AMMs & Liquidity Pools Today, I delved into Automated Market Makers (AMMs) and Liquidity Pools as part of my ongoing smart contract security course, focusing on TSwap, a Uniswap V1 fork. 🛠 Challenges & Insights: AMMs, with their ability to maintain protocol invariants, are critical to decentralized exchanges. The session on stateful and stateless fuzzing highlighted the importance of thorough testing to ensure security—a reminder of the lessons learned during the Puppy Raffle audit. 🚀 Empowering Users: AMMs offer a unique opportunity for users to become their own banks, democratizing access to financial systems. This aligns with Web3’s mission to give power back to individuals, especially the unbanked. 🌱 Key Takeaways: As I continue this course, the importance of security and resilience in building these decentralized systems becomes ever clearer, driving my growth as a blockchain developer.

17 replies

11 recasts

42 reactions

Will Stansill pfp

🔍 Day 44 of 100DaysOfBlockchain: Completing My Second Audit Report—With Some Challenges! The past few days were a rollercoaster. My Puppy Raffle audit faced unexpected issues, leading to technical challenges and ultimately a fresh start with Ubuntu. 🛠 Challenges & Insights: A major issue with generating the audit PDF forced me to reinstall Ubuntu, but it highlighted the importance of persistence and creativity in problem-solving. 📜 Puppy Raffle Audit Report: This audit delved deeper into vulnerabilities and security practices, proving that confronting difficult challenges often leads to significant growth. 🚀 Key Takeaways: Security is a fundamental aspect of reliable smart contracts. Thorough practices and a fresh perspective on unexpected hurdles strengthen skills and improve craft. Each challenge moves me closer to becoming a better blockchain developer. https://github.com/WillStansill/Auditing-Porfolio/blob/main/puppy-raffle-audit.pdf

17 replies

5 recasts

39 reactions

Will Stansill pfp

🔍 Day 43 of 100DaysOfBlockchain: Sharpening My Audit Skills! Today, I focused on smart contract auditing, using Slither and Aderyn to spot vulnerabilities without running the code. Mastering these tools is crucial for building secure contracts. 🔐 Challenges & Insights: Understanding Denial of Service (DoS) attacks was eye-opening. Realizing how a simple open for loop can be a major risk has changed my approach to coding. I’ll now be more cautious and seek alternatives to avoid such pitfalls. 📜 Key Takeaways: Security is a vital part of development. Thoroughly reviewing documentation and anticipating risks helps in creating robust contracts. This experience has reinforced the importance of integrating security into my development process. 🚀 Moving Forward: I’m committed to making security a core aspect of my work. It's not just about avoiding issues but ensuring that every contract is strong and secure. On to the next challenge!

9 replies

9 recasts

36 reactions

Will Stansill pfp

🚀 Day 42 of 100DaysOfBlockchain: Completing My First Smart Contract Audit! 🔍 I’m thrilled to share that I’ve completed my first comprehensive audit for the PasswordStore smart contract! This milestone highlights my commitment to smart contract security and reliable code. 🔍 Audit Overview: The audit involved reviewing the contract’s design, scoping the project, and identifying vulnerabilities such as access control flaws and private data exposure. I provided detailed proof of concept and recommendations for each issue. 📜 Report Structure: The final report includes a summary of issues, detailed descriptions, impact assessments, exploitation demonstrations, and suggested fixes. The PDF report is attached for review. Though this was a basic audit, I’m excited to delve deeper into smart contract security. https://github.com/WillStansill/Auditing-Porfolio/blob/main/8-8-2024%20password-audit-report.pdf

15 replies

15 recasts

38 reactions

Will Stansill pfp

🚀 Day 41 of 100DaysOfBlockchain: 🚀 🌐With the recent completion of the foundry course that I spent so much time on. Over the past couple days I have been taking the time to go through and revamp all aspects of my portfolio website as well as resume to better reflect the experience and progress I have gained. 🔗I will be linking my updated portfolio project below where you can find a brand new resume, updated UI, and most importantly massive additions to the projects tab within my personal portfolio website. If you have been following my journey for some time now you will see many of the projects I have put time into over the past few months. 🖥️This experience has been incredibly rewarding as its incredible to be able to see such a tangible difference that I have made in my journey as a developer since the start of this series. Take a look for yourself and check it out. I'd love to hear your feedback! https://portfolio-website-umber-ten-21.vercel.app/projects

17 replies

9 recasts

38 reactions

Will Stansill pfp

🚀 Day 40 of 100DaysOfBlockchain: Advanced Foundry Course Completion 🌐 📚 Course Highlights: Completed the advanced Foundry course through Cyfrin Updraft, diving deep into blockchain development. 🔗 Key Projects: Built an ERC20 token, NFT collection, and DeFi protocol, mastering token standards and asset management. 🔒 Advanced Features: Implemented secure airdrops and upgradeable contracts. Developed a DAO for community governance and account abstraction. 🔧 Technical Challenges: Enhanced testing and debugging skills, managed state and time manipulation, and handled complex DeFi and DAO interactions. 🛡️ Security & Reliability: Performed security audits and applied best practices, ensuring robust smart contracts. 🔍 Learning Outcomes: Mastered token standards, governance, and DeFi, improving my ability to design secure, adaptable blockchain solutions.

11 replies

9 recasts

44 reactions

Will Stansill pfp

🚀 Day 39 of 100DaysOfBlockchain: Building a DAO with Governance Voting 🌐 🔍 DAO Governance Implementation: I’ve built a DAO using Solidity and Foundry to enhance decentralized decision-making. This system lets community members propose, vote, and execute changes, with a Governor contract, TimeLock, and GovToken for voting. 📜 Key Features: Proposal Creation: Token holders can propose changes. Voting Mechanism: Enabled transparent voting, counting, and state transitions. Execution: Added delays and steps for proposals. Role-Based Control: Managed roles for proposers and executors. 🌐 Benefits: This DAO fosters decentralized decision-making and community engagement, enhancing project resilience. Check the comments for the repository link and details. My repository: https://github.com/WillStansill/Foundry-DAO

13 replies

8 recasts

47 reactions

Will Stansill pfp

🚀 Day 38 of 100DaysOfBlockchain: Completing a Vesting Contract with Role-Based Access Control 🌐 🔍 Vesting Contract Completion I'm thrilled to announce that I have successfully completed the second round of a technical interview for a paid blockchain developer internship by implementing a robust vesting contract with role-based access control. 📜 Understanding the Vesting Contract This contract manages token vesting for Users, Partners, and Team roles with specific schedules. Users receive 50% of tokens with a 10-month cliff and 2-year vesting duration. Partners and Team members each get 25% with a 2-month cliff and 1-year vesting. ⚙️ Key Features Implemented Role Definitions: Defined User, Partner, and Team roles, each with distinct vesting schedules. Vesting Management: Implemented functions to start vesting, add beneficiaries, and claim tokens. The video link below is a walkthrough through my codebase. https://www.awesomescreenshot.com/video/29901641?key=de30991a679751792c5ba1021bec10c7

9 replies

13 recasts

36 reactions

Will Stansill pfp

Day 37 of 100DaysOfBlockchain: Embracing the Process Today, I wanted to share a recent experience that highlighted a key lesson in problem-solving. I encountered a persistent bug where a function was being called from the wrong address. Despite my efforts with Stack Overflow, ChatGPT, and community help, the solution eluded me. After a frustrating day, I took a break to go backpacking in West Virginia for my 25th birthday. It was refreshing to step away from the code and recharge. When I returned, I solved the issue in about five minutes. The lesson? Sometimes stepping back and returning with fresh eyes can make all the difference. Today, I completed my Account Abstraction lesson on Ethereum and will dive into ZKsync’s native account abstraction next. Here are some photos from the trail.

8 replies

11 recasts

40 reactions

Will Stansill pfp

🚀 Day 36 of 100DaysOfBlockchain: Account Abstraction Deep Dive 🌐 🔍 Progress Update: Yesterday, I gave a broad overview of account abstraction. Today, I’m diving into specific implementations and the challenges faced. 📜 Refining Understanding: Account abstraction offers practical solutions for flexible blockchain account management. ⚙️ User-Friendly Interface: To simplify blockchain interactions, I've integrated account abstraction into my dApps, focusing on intuitive interfaces that mask technical complexities. 📝 Packed User Operations: Implemented Packed User Operations to bundle multiple actions into one transaction, optimizing gas usage. Developed a script for signing and verifying these operations to ensure security and efficiency. 🔧 Technical Challenges: Addressed compatibility issues and edge cases, especially integrating OpenZeppelin’s cryptographic functions with custom smart contract logic. Careful handling of data and signatures was crucial.

15 replies

6 recasts

45 reactions

Will Stansill pfp

🚀 Day 35 of 100DaysOfBlockchain: Exploring the Potential of Account Abstraction 🌐 🔍 Introduction to Account Abstraction Over the past couple of days, I’ve been diving into the concept of account abstraction. The possibilities it unlocks have left me feeling incredibly optimistic about the future of blockchain technology. 📜 Understanding Account Abstraction In simple terms, account abstraction allows for greater flexibility in how blockchain accounts are managed and interacted with. Instead of rigid structures, it introduces new ways for users to engage with blockchain applications, making the experience more intuitive and user-friendly. ⚙️ Lowering the Barrier to Entry One of the significant challenges in the Web3 space is the steep learning curve. Concepts like private keys, seed phrases, MetaMask, and the distinctions between Layer 1 and Layer 2 solutions can be overwhelming for newcomers.

15 replies

2 recasts

40 reactions

Will Stansill pfp

🚀 Day 34 of 100DaysOfBlockchain: Deep Dive into Merkle Airdrops and Signature Verification 🏅 🔍 Introduction to Merkle Airdrops and Signatures Today, I explored the exciting world of Merkle airdrops and digital signatures. A Merkle airdrop allows us to efficiently and securely distribute tokens, leveraging the cryptographic structure of Merkle trees to verify proofs. ⚙️ Implementing the Base Airdrop Contract I wrote a base smart contract, MerkleAirdrop.sol, incorporating Merkle tree logic to check if an address is eligible for an airdrop. This contract includes mechanisms to prevent double-claiming and verify signatures. 🔑 Adding Signature Verification I integrated signature verification into the airdrop contract using standards like EIP-191 and EIP-712. This ensures that only the intended recipients can claim the tokens, adding an extra layer of security.

11 replies

8 recasts

42 reactions

Will Stansill pfp

🚀 Day 33 of 100DaysOfBlockchain: Exploring zkSync and Zero-Knowledge Proofs 🏅 🔍 Introduction to zkSync Today, I dived into zkSync, which utilizes zero-knowledge proofs, an innovative solution to scalability in the Ethereum ecosystem. Zero-knowledge proofs are a way for one party to prove to another that a statement is true without revealing any specific information about the statement itself. ⚙️ Zero-Knowledge Proofs in Simple Terms Zero-knowledge proofs allow someone to confirm they know a secret without revealing the secret. 📜 Integrating zkSync into Projects I spent time updating much of my older projects with zkSync's zero-knowledge proof technology, significantly enhancing scalability. 🚀 Bridging and Deploying on Testnets Today involved refreshing my knowledge on integrating zkSync into my projects, focusing on lessons about bridging Sepolia testnet to zkSync testnet ether and deploying to testnets at a fraction of the cost.

8 replies

9 recasts

44 reactions

Will Stansill pfp

🚀 Day 32 of 100DaysOfBlockchain: Upgradeable Smart Contracts 🏅 🔍 Introduction to Upgradeable Contracts Explored the advantages, risks, and methodologies of upgradeable smart contracts. ⚙️ Delegatecall in Solidity Delved into delegatecall, highlighting its differences from regular call functions and its impact on smart contract design. 📜 EIP-1967 and Proxy Contracts Learned about EIP-1967 and its significance in proxy contracts. Built a minimalistic proxy, enhancing my understanding of this standard and its application in creating upgradeable smart contracts. 🚀 Deploying and Testing UUPS Proxies Worked with OpenZeppelin UUPS proxies, focusing on setup, deployment, and testing. Successfully deployed and tested stablecoin smart contracts on a testnet, ensuring the functionality and reliability of the upgrades. My repository: https://github.com/WillStansill/Foundry-Upgradable-Smart-Contract

8 replies

7 recasts

40 reactions

Will Stansill pfp

🚀 Day 31 of 100DaysOfBlockchain: Decentralized Stablecoin Project 🏅 🔗 Stablecoins address the issue of crypto instability by being backed by assets like Bitcoin and Ethereum. My goal with DSC was to create a reliable decentralized stablecoin. 🔗 🛠️ Key Accomplishments 🛠️ DeFi Essentials: Explored DeFi and the crucial role of stablecoins in the crypto ecosystem. Smart Contract Development: Created a stablecoin backed by Bitcoin and Ethereum, focusing on security and reliability. 🌐 Building DSCEngine 🌐 Collateral Management: Developed functions for depositing collateral, minting tokens, and managing system stability. 🔓 Advanced Testing 🔓 Foundry Testing: Used Foundry for fuzz testing and invariant checks to enhance contract robustness. 🔥 Dynamic Minting & Burning 🔥 Enabled minting and burning of DSC based on health factors to keep the system balanced. My Repository: https://github.com/WillStansill/Foundry-StableCoin

0 reply

0 recast

3 reactions

Will Stansill pfp

🚀 Day 30 of 100DaysOfBlockchain: Mastering Smart Contract Testing 🧪 🛠️ Advancing with Fuzz Testing 🛠️ Today, I took a significant leap forward by diving into fuzz testing for smart contracts. This advanced testing technique has been crucial in ensuring that my contracts work seamlessly under various conditions, enhancing their security and reliability. 🔍 Understanding Fuzz Testing 🔍 Fuzz testing involves providing random or unexpected data inputs to a program to identify vulnerabilities. It’s like throwing random wrenches into the machinery to see what breaks, revealing potential weaknesses. 🖱️ Enhancing the Health Factor Function 🖱️ During testing, I refactored the _calculateHealthFactor() function for cleaner code and improved visibility into the health factor calculation. This ensures the system remains stable under edge cases, like a user depositing a massive amount of collateral without minting any DSC.

0 reply

0 recast

3 reactions

Will Stansill pfp

🚀 Day 29 of 100DaysOfBlockchain: A Breakthrough in Smart Contract Testing 🧪 🛠️ Embracing the Challenge of Writing Robust Tests 🛠️ Recently, I've challenged myself to write and design smart contract tests independently. This has marked a significant breakthrough in my journey toward becoming a competent blockchain developer. Writing tests ensures functionality, security, and reliability—essential for the broader adoption of blockchain technology. 🔍 Deep Dive into Independent Testing 🔍 My focus has shifting from following instruction to creating and refining my own tests. This shift I have found is akin to understanding the grammar of a new language on a fundamental level. While many can learn basic phrases in a new language, true fluency comes from grasping the underlying structure. Similarly, mastering test writing has deepened my understanding of the functions I create and how they can be interacted with, bringing a new level of fluency and competency to my development process.

0 reply

0 recast

0 reaction

Will Stansill pfp

🚀 Day 28 of 100DaysOfBlockchain: Mastering Smart Contract Testing 🧪 🛠️ Focusing on Writing Robust Tests 🛠️ Recently, I've been honing my skills in writing tests for smart contracts. Moving beyond tutorials, I've focused on creating my own tests, which is crucial for becoming a competent developer. Strong tests ensure your contracts work under various conditions, maintaining security and reliability—key aspects for the global adoption of blockchain technology. 🖱️ Constructor and Price Feed Tests🖱️ I started with constructor tests to confirm proper initialization. These tests ensure the contract reverts when the token lengths don't match the price feeds, a critical check for stability. 💿Testing Deposit Collateral💿 I also tested the depositCollateral() function to ensure it properly reverts with unapproved tokens. This is crucial for maintaining security and preventing unauthorized tokens from being deposited.

0 reply

0 recast

0 reaction

Will Stansill pfp

🚀 Day 27 of 100DaysOfBlockchain: Advancing My Decentralized Stable Coin Project 🌐 🛠️ Focusing on Collateral Distribution and Liquidation 🛠️ Today, my attention has been primarily on refining the distribution of collateral and perfecting the liquidation aspects of my decentralized stable coin. Ensuring that these functionalities work seamlessly is critical for maintaining the integrity and stability of the system. 🔍 Streamlining Collateral Deposit and Minting DSC 🔍 I've been working on merging the deposit and mint mechanisms into a single, user-friendly function called depositCollateralAndMintDsc(). This new function allows users to deposit collateral and mint DSC in one swift and efficient transaction, simplifying the user experience and optimizing the protocol's operational flow. 📜 Enhancing the Redeem Collateral Function 📜 Developing the redeemCollateral function has been a meticulous process. This function allows users to redeem their collateral securely.

0 reply

0 recast

0 reaction