MAMuhammad Asifinblockhertz.hashnode.dev·21h ago · 3 min readReentrancy Attack in Solidity: What It Is, Real Examples, and How to Prevent It (2026)A reentrancy attack occurs when a malicious smart contract repeatedly calls a vulnerable contract's withdraw function before the balance updates — draining all funds in a loop. It is the most common s00
NNovainnovacont.hashnode.dev·5d ago · 7 min readThe Gas Budget Problem Nobody Warns You About in TON ContractsIf you come to TON from an EVM background, gas feels like a solved problem you already understand. You pay for computation, the caller covers it, transactions revert if they run out. You have done thi00
NNovainnovacont.hashnode.dev·6d ago · 7 min readWhy I Split My Escrow Into Two ContractsWhen I started building an on-chain escrow protocol, the obvious design was one contract. Funds go in, parties interact, disputes get resolved, funds come out. One deployment, one address, one place t00
NNovainnovacont.hashnode.dev·6d ago · 7 min readTrust Is a Security Vulnerability. Stop Treating It as a Feature.We talk about trust as if it were an asset. We build "trusted platforms," issue "trusted certificates," onboard "trusted partners." The word is everywhere in security marketing, always positive, alway00
NNovainnovacont.hashnode.dev·Aug 2 · 8 min readI Built the Same Escrow on Two Chains. The Architectures Couldn't Be More Different.I maintain a non-custodial escrow protocol that runs on two blockchains: Base, an Ethereum L2, and TON, the chain behind Telegram. Same product, same core logic on paper: lock funds, deliver work, rel00
Mmehveteroinmehvetero.com·Aug 1 · 8 min readHow a Missing `assert!` Drained $3.44M From Typus Finance — and Why the Code Looked CorrectOn October 15, 2025, at 13:05 UTC, an attacker began draining Typus Finance's TLP liquidity pool on the Sui network. Thirty-four minutes later, the contracts were paused — but the pool was already emp00
AMA.S Myrosinblazephoenix.hashnode.dev·Aug 1 · 8 min readAnatomy of an Honest DEX Aggregator: How BlazePhoenix Eliminated Simulation Drift and Phantom Liquidity in EVM Bytecodetags: solidity, web3, ethereum, smart-contracts, architecture canonical: https://blazephoenix.xyz/architecture Across the Decentralized Finance (DeFi) ecosystem on Layer 2 networks (such as Base, Arbi00
00x5varogin0x5varog.hashnode.dev·Jul 29 · 91 min readLiquidations 2.0: Inside Sky's Dog, Clipper & AbaciA liquidation is usually described as a simple concept: when a collateralized position becomes unsafe, the collateral is sold, and the proceeds are used to cover its debt. This explanation is useful f00
AGAnuja Geethinanujageeth.hashnode.dev·Jul 25 · 11 min readDecentralized Trust: The Mechanics and Risks of Smart Contracts1. Introduction: Beyond Intermediaries, Into Code Over the course of this series, we established the fundamental architecture of distributed ledgers and mapped the traditional full stack directly to d00
Mmehveteroinmehvetero.com·Jul 24 · 8 min readHow One Missing Assert Drained $1.14M From Aftermath Finance — A Signed Integer Exploit on Sui A technical breakdown of the Aftermath Finance perpetuals exploit (April 29, 2026). How a negative fee value bypassed validation, inflated collateral, and allowed an attacker to drain $1.14M USDC in 300