Joined January 2022
4 Photos and videos
Programming Bao retweeted
THANK YOU. Your tolerance and support of me here on X by just interacting with my postings and subscribing if you care to here or my very long form at ReadMultiplex.com helps pays for this. I ain’t got no one else. I love you folks. Gratitude.
Folks, I think we have done it! If overnight tests are confirmed we have OPEN SOURCE DeepSeek R1 running at 200 tokens per second on a NON-INTERNET connected Raspberry Pi. A full frontier AI better than “OpenAI” owned fully by you in your pocket free to use! I will make the Pi image available as soon as all tests are complete. You just pop it into a Raspberry Pi and you have AI! This is just the start of the power that takes place when you TRULY Open Source an AI Model.
104
109
1,242
54,545
Programming Bao retweeted
17 Sep 2024
🌐 Work from anywhere, anytime! 🏖️ CodeCall lets you choose projects, work remotely, and get paid for your contributions. One-click GitHub signup makes it a breeze! 🌬️💨 Join us today! 💪 #RemoteWork #Developers #TechTrends #DigitalNomad #CodingLife

ALT Work Vacation GIF

2
4
187
Programming Bao retweeted
25 Aug 2024
🚀 Hey Developers! Join CodeCall—where skill meets opportunity. Work on impactful projects, earn rewards, gain XP, and climb the leaderboard to get noticed by top companies. One-click signup, no email needed! 🔗 Compete. Learn. Earn. #DevCommunity #Programming #Developer
1
2
2
151
Programming Bao retweeted
11 Sep 2024
🚀 Code, Compete, Get Paid—It’s That Simple! 🚀 Earn more, get hired faster, and work on real projects with top businesses. Join us and make your skills count. Launching in October! #TechJobs #DevCommunity #TechCareers #Remotework #codinglife
2
2
98
Startup allowing devs to contribute code and get paid Like bug bounties but for development Launching soon with some MERN based projects with bounties ranging from €5,000 to €160,000 discord.gg/UNdgzxZEJq codecall.xyz
73
Programming Bao retweeted
15 Feb 2024
These days, we've managed to uncover a Critical issue stemming from misunderstandings about who is the msg.sender in a nested Uniswap call, all thanks to @TenderlyApp. If you find yourself needing to debug a transaction with numerous nested functions in external contracts, Tenderly is definitely the tool for you.
1
2
12
1,289
Programming Bao retweeted
26 Dec 2023
If you are doing a smart contract security audit and see this `require(token.balanceOf(address(this)) == ….` You’ve most probably found an issue. Anyone who can get 1 wei worth of `token` can send it to the contract as a front-run attack, forcing the method call to revert
17
18
287
20,561
Programming Bao retweeted
30 Dec 2023
If you deploy smart contracts on multiple chains like Ethereum, Arbitrum, Polygon, Optimism and others you would greatly benefit from this resource. GJ @juancito github.com/0xJuancito/multic…
3
46
220
14,879
Programming Bao retweeted
2 Jan 2024
Special `try-catch` case from Solidity's docs: If the return data decoding throws an error it is not caught by the `catch` block.
4
6
80
8,105
Programming Bao retweeted
3 Jan 2024
My learning technique has always been "just read 10 articles or watch 5 videos on the topic or more until you understand it" You can go very far with just this, especially by remembering that whatever is hard for you is in most cases hard for others as well
9
30
245
13,051
Programming Bao retweeted
10 Jan 2024
In smart contracts, whenever you see ">" (or "<") check that it shouldn't actually be ">=" (or "<=") and vice versa. Off-by-one errors are quite common and can result in a High severity vulnerability. Every experienced security researcher has caught such a bug at least once✌️
5
11
187
9,220
Programming Bao retweeted
11 Jan 2024
Your code might have a critical severity vulnerability, allowing an attacker to steal 100% of the TVL. This is your daily reminder to check each division in your application (especially when it comes to pool/vault shares math) and make sure it rounds down/up AGAINST the user.
3
5
103
7,412
Programming Bao retweeted
13 Jan 2024
Common smart contract attack vector? Flawed/missing input validation. For every `external/public` method check that each of its parameters is sufficiently validated, for example that a `uint256` isn't too small or too big. By just doing this you'll find many bugs as an auditor
3
10
123
8,923
Programming Bao retweeted
16 Jan 2024
Good place to look for smart contract bugs - duplication of code and reimplementation of the same business logic. Often in such code there can be discrepancies/differences, where one part of the code has an important check which is missing in the other. Possibly a Critical bug✌️
4
2
70
6,017
Programming Bao retweeted
17 Jan 2024
Exclusion from this rule is when the `payable` function actually forwards the `msg.value` directly to some recipient
1
7
1,323
Programming Bao retweeted
17 Jan 2024
First thing you MUST check when you see a smart contract that has a `payable` function is if the native asset can be withdrawn from it. Imagine deploying a contract, accruing hundreds of ETH of value in it and not being able to withdraw them. Critical severity vulnerability
14
16
154
10,271
Programming Bao retweeted
21 Jan 2024
One of the best ways to learn about previous smart contract hacks, understand them in depth and read the code with which the attack can be executed? Here it is, 10/10 resource github.com/coinspect/learn-e…

10
83
396
24,085
Programming Bao retweeted
23 Jan 2024
If you are auditing a smart contract and see math calculations for the slippage parameter to be passed to a swap operation, it is highly likely this is a Medium/High severity issue. Slippage parameters should only be calculated off-chain, because of possible sandwich attacks
3
18
192
11,976
Programming Bao retweeted
24 Jan 2024
Allowing deposits and withdraws in the same block for a staking/vault mechanism can be dangerous. An attacker can use a flashloan to deposit a large amount of tokens and withdraw them in the same block, simultaneously claiming the reward accrued (if any), essentially stealing it
7
8
120
10,721