DeFi & governance
ERC-4626: a vault share is not an immediately withdrawable balance
Read conversion rates, fees and withdrawal limits as separate quantities.
Research · History · Reference
All entries A–Z · 6 / 15
438 · Articles and references
Smart accounts and governance
ERC-6492: signatures from an account that is not deployed yet
An empty address can have a planned contract identity; verification must follow the correct model.
Smart accounts and governance
ERC-7579: wallet modules are part of the authority map
Validators, executors and hooks have different powers inside a modular smart account.
Research methods
eth_getProof: check the state, then check the root you trusted
Account and storage proofs can make an RPC answer verifiable, but they do not choose the canonical chain for you.
Chains & networks
Ethereum: applications share a settlement system
ETH, smart contracts and tokens have distinct roles and distinct risks.
Crypto history
EthereumMax paid promotion
Kim Kardashian settled SEC charges over an undisclosed $250,000 payment to promote EthereumMax.
Crypto history
Euler donation-to-reserves exploit
Euler was exploited in 2023 through interactions involving lending positions and its donation mechanism.
Blockchain fundamentals
Events and transaction logs
Contracts emit indexed logs consumed by wallets and explorers.
Research methods
Evidence snapshots: make a finding reproducible
A claim needs enough context to survive a changed interface.
Blockchain fundamentals
EVM account state
Ethereum tracks balances, nonces, code and contract storage.
Market structure
Exchange mark-price discretion
A venue liquidates from an index or mark instead of the last trade.
Scam patterns
Fake airdrops and claim pages
An unexpected asset can be an advertisement for a malicious website.
Scam patterns
Fake bridge interfaces
A clone accepts approvals or deposits without a valid destination route.
Scam patterns
Fake browser extensions
A malicious extension appears beside a legitimate wallet in store or search results.
Scam patterns
Fake crypto recruitment tests
A supposed employer asks an applicant to install software, clone a repository or run a coding task.
Scam patterns
Fake exchange deposit pages
A clone shows plausible balances after funds reach attacker wallets.
Scam patterns
Fake exchange-listing announcements
A promoter claims a large venue will list a token at a fixed time.
Scam patterns
Fake law-firm recovery
A website copies lawyers, regulators or investigators and claims seized assets await release.
Scam patterns
Fake listings and borrowed exchange credibility
A screenshot of an announcement is easy to copy and difficult to date.
Scam patterns
Fake MEV-bot contracts
A supposed MEV system advertises passive sandwich or arbitrage income.
Scam patterns
Fake NFT mints
A promoted mint asks for broad permissions or transfers unrelated to the purchase.
Scam patterns
Fake partnership announcements
A token uses a recognised company's logo or a minor vendor interaction as a partnership.
Scam patterns
Fake proof-of-reserves claims
A provider publishes selected wallet balances without complete customer liabilities.
Scam patterns
Fake support screen sharing
A supposed support agent asks to watch or control the screen.
Scam patterns
Fake support: urgency with borrowed branding
Impersonators appear where users are already looking for help.
Market structure
FDV as a valuation weapon
A tiny float sets a price multiplied across the entire supply.