Mmehveteroinmehvetero.com·6d ago · 12 min readBlueMove Was Not an Overflow Bug — How a Cross-Version Reserve Desync Drained 714,000 SUIOn July 11, 2026, at 22:13 UTC, an attacker began draining liquidity pools on BlueMove DEX, a Sui-based AMM. Within 23 minutes, approximately 714,000 SUI — roughly $528,000 at the time — had crossed a00
MAMuhammad Asifinblockhertz.hashnode.dev·Aug 8 · 3 min readReentrancy Attack in Solidity: What It Is, Real Examples, and How to Prevent It (2026)A reentrancy attack occurs when a malicious smart contract repeatedly calls a vulnerable contract's withdraw function before the balance updates — draining all funds in a loop. It is the most common s00
NNovainnovacont.hashnode.dev·Aug 4 · 7 min readThe Gas Budget Problem Nobody Warns You About in TON ContractsIf you come to TON from an EVM background, gas feels like a solved problem you already understand. You pay for computation, the caller covers it, transactions revert if they run out. You have done thi00
NNovainnovacont.hashnode.dev·Aug 3 · 7 min readWhy I Split My Escrow Into Two ContractsWhen I started building an on-chain escrow protocol, the obvious design was one contract. Funds go in, parties interact, disputes get resolved, funds come out. One deployment, one address, one place t00
NNovainnovacont.hashnode.dev·Aug 2 · 7 min readTrust Is a Security Vulnerability. Stop Treating It as a Feature.We talk about trust as if it were an asset. We build "trusted platforms," issue "trusted certificates," onboard "trusted partners." The word is everywhere in security marketing, always positive, alway00
NNovainnovacont.hashnode.dev·Aug 2 · 8 min readI Built the Same Escrow on Two Chains. The Architectures Couldn't Be More Different.I maintain a non-custodial escrow protocol that runs on two blockchains: Base, an Ethereum L2, and TON, the chain behind Telegram. Same product, same core logic on paper: lock funds, deliver work, rel00
Mmehveteroinmehvetero.com·Aug 1 · 8 min readHow a Missing `assert!` Drained $3.44M From Typus Finance — and Why the Code Looked CorrectOn October 15, 2025, at 13:05 UTC, an attacker began draining Typus Finance's TLP liquidity pool on the Sui network. Thirty-four minutes later, the contracts were paused — but the pool was already emp00
AMA.S Myrosinblazephoenix.hashnode.dev·Aug 1 · 8 min readAnatomy of an Honest DEX Aggregator: How BlazePhoenix Eliminated Simulation Drift and Phantom Liquidity in EVM Bytecodetags: solidity, web3, ethereum, smart-contracts, architecture canonical: https://blazephoenix.xyz/architecture Across the Decentralized Finance (DeFi) ecosystem on Layer 2 networks (such as Base, Arbi00
00x5varogin0x5varog.hashnode.dev·Jul 29 · 91 min readLiquidations 2.0: Inside Sky's Dog, Clipper & AbaciA liquidation is usually described as a simple concept: when a collateralized position becomes unsafe, the collateral is sold, and the proceeds are used to cover its debt. This explanation is useful f00
AGAnuja Geethinanujageeth.hashnode.dev·Jul 25 · 11 min readDecentralized Trust: The Mechanics and Risks of Smart Contracts1. Introduction: Beyond Intermediaries, Into Code Over the course of this series, we established the fundamental architecture of distributed ledgers and mapped the traditional full stack directly to d00