Aadriroinadriro.hashnode.dev·Jan 2, 2025 · 4 min readA Tale of Two Calls: How a Reentrancy Attack Can Take Over Maker's CDPsSome time ago, I was reviewing an implementation of ERC-3156 and decided to hunt for some unprotected flashloan callbacks. While this depends on the specifics of each case, you usually need a check to restrict who is calling this hook, making it easy...00
Aadriroinadriro.hashnode.dev·Sep 8, 2024 · 1 min readSecurity notes on ERC4337 and smart walletsAccount abstraction Account abstraction is an extensive topic, but at a very high level, the idea is to abstract the concept of an account into a smart contract (the smart wallet) that allows a lot more flexibility than an EOA (externally owned accou...00
