---
title: "adriro (@adriro) | Hashnode"
description: "independent security researcher. Read the latest articles by adriro on Hashnode."
url: "https://hashnode.com/@adriro"
---

@adriro

# adriro

@adriro · Joined December 2024

independent security researcher

### [A Tale of Two Calls: How a Reentrancy Attack Can Take Over Maker's CDPs](https://adriro.hashnode.dev/a-tale-of-two-calls-how-a-reentrancy-attack-can-take-over-makers-cdps?utm_source=hashnode&utm_medium=feed)

Some time ago, I was reviewing an implementation of ERC-3156 and decided to hunt for some unprotected flashloan callbacks. While this depends on the specifics of each case, you usually need a check to restrict who is calling this hook, making it easy...

4 min read · [adriro.hashnode.dev](https://adriro.hashnode.dev/a-tale-of-two-calls-how-a-reentrancy-attack-can-take-over-makers-cdps?utm_source=hashnode&utm_medium=feed)

[Jan 2, 2025](https://hashnode.com/posts/a-tale-of-two-calls-how-a-reentrancy-attack-can-take-over-makers-cdps/6776918a817b1ab4ab8dbdee)

### [Security notes on ERC4337 and smart wallets](https://adriro.hashnode.dev/security-notes-on-erc4337-and-smart-wallets?utm_source=hashnode&utm_medium=feed)

Account abstraction Account abstraction is an extensive topic, but at a very high level, the idea is to abstract the concept of an account into a smart contract (the smart wallet) that allows a lot more flexibility than an EOA (externally owned accou...

1 min read · [adriro.hashnode.dev](https://adriro.hashnode.dev/security-notes-on-erc4337-and-smart-wallets?utm_source=hashnode&utm_medium=feed)

[Sep 8, 2024](https://hashnode.com/posts/security-notes-on-erc4337-and-smart-wallets/693761715ef301c632dae4d3)