Officer's Blog

We’ll look at some specific advice for/when working with initializing, proxy, oracles and auditing during the development of smart contracts on Solidity as we continue our series of educational articles!Auditor’s Advice: Math, Solidity & Gas Optimizations | Part 1/3Auditor’s Advice: Solidity Checklist & Reentrancy Attack | Part 2/3Auditor’s Advice: EVM Limitations & Assembly Auditing Tips | Part 3/3Additionally, today marks the continuation of a special series in which we will talk about vari...

We continue our series of educational articles and today we’ll look at some specific tips for auditing during the development of smart contracts on Solidity! Today also marks the conclusion of a three-part series in which we will explore various aspects of an auditor’s (or developer’s, if we’re talking about internal auditing) duties, ranging from gas optimization to attack protection and EVM limits. We guarantee it will be enjoyable! More articles will be published soon!By the way, there are...

We continue our series of educational articles and today we’ll look at some specific tips for auditing during the development of smart contracts on Solidity! Today we also continue a unique 3-part series in which we will discuss various facets of an auditor’s (or developer’s, if we’re talking about internal auditing) work, from gas optimization to attack protection and EVM limitations. We guarantee it will be entertaining!By the way, there are some vacant slots now so if your project needs an...

We continue our series of educational articles and today we’ll look at some specific tips for optimizing gas & auditing during the development of smart contracts on Solidity! Today we also kick off a unique 3-part series in which we will discuss various facets of an auditor’s (or developer’s, if we’re talking about internal auditing) work, from gas optimization to attack protection and EVM limitations. We guarantee it will be entertaining!By the way, there are some vacant slots now so if your...

Greetings, dear readers! Today we’ll look at the significant news and updates pertaining to our Slitherin project in this article. We at Pessimistic assure you that it will be fascinating — Slitherin, our own set of custom detectors for Slither, got another awesome update!Release v0.2.0 · pessimistic-io/slitherinMajor Updates Reworks and additions pess-uni-v2 detector: Added a check of functions where path parameter is set through an external invocation. Thx @idrocortisone pess-readonly-reent...

We’ll continue our instructive series with advice for ERC20 integration today. This post will look at the guidance you’ll need to integrate fungible tokens into your project, as well as audit and even design such integrations using ERC20 as an example!ERC20 is not a technology, software, or piece of code. It is a technical specification. If a token implements the spec, it is an ERC20 token. The ERC20 protocol standard contains basic functions that any useful token should implement to enable t...

Today, we’d like to continue a series of articles in which we’ll examine new promising tools and learn how to use them, as well as their advantages and disadvantages. We understand and respect your limited time, therefore we created a specific research article with nothing superfluous only for you!Authors: Nikita Kirillov, officercia.ethThis series will only cover aspects of auditing, bug bounty & white-hacking that are not covered elsewhere. We will additionally look into Semgrep rules for s...

The problem of security has recently become very urgent due to the enormous number of hacks and security incidents in the Web3 sphere. Everyone has very different ideas and suggestions on this topic, so we will only attempt to describe a portion of them today. Therefore, below you will see not a typical article but a systematization of knowledge (SoK)!How long are you in cybersecurity? Please tell me a bit about yourself and your experience in this questionnaire that I put together with my fr...

We’re continuing our series of educational articles and today we’re going to look at how to securely integrate AMM into your project!Greetings, dear readers!We continue our series of educational articles and today we’ll look at AMM (Automatic Market Makers) integration tips. Using Uniswap model as an example, this article will look at the advice you’ll need to integrate AMM into your project as well as audit and even develop such integrations. However, there will also be advice for other inte...

Greetings, dear readers! Today we’ll look at the significant news and updates pertaining to our Slitherin project in this article. We assure you that it will be fascinating — Slitherin, our own set of custom detectors for Slither, got the first community-origin update! https://officercia.mirror.xyz/ucWYWnhBXmkKq54BIdJcH5GnrAB-nQkUsZ2F-ytEsR4 We’ve applied some significant community-origin updates during this time, and we appreciate all of your love and attention. Thank you, let’s get it start...

We’ll go over all of our work from May 2023 to June 2023 with you and summarize all of the particularly important Spotter-related events in the upcoming digest piece. Our proactive alert system against crypto exploits has only gotten better over this time!Spotter's AlmanacSpotter's Almanac In the upcoming digest piece, we'll go over an overview of our Pessimistic Spotter on-chain monitoring & defense service! spotter.pessimistic.io - ...https://blog.pessimistic.ioSo today, in t...

Greetings dear readers!We continue our series of educational articles and today we’ll look at some professional tips in the auditing smart contracts on Arbitrum blockchain. In this article we will focus only on those aspects that can be really useful for auditing Arbitrum-based projects!Everything you see below is based on our personal experience!And today, dear readers, it will be made available to you! We also encourage you to read our earlier article, which contains a wealth of auditors’ a...