Alexey Pertsev @alex_pertsev Twitter profile

Last Seen Profiles

@spligga

@happyyakuza

@touyaxxxxx

@alwassl2030

@PawokeLenitard

@stw_pdg

@therealdana7

@arzion

@fujirock_jp

@PacerETFs

@uzumakigallery

@enayAca40821790

@TheRealYaso

@CimenoMarn47447

@TheVoiceNews

@MoThePharaoh

@TereseWojt69373

@HunamoreHan

@thunderjam134

@JDGaming

@PWUnion1

@vladazatsarynna

@netvrk1

@HardebeckM10134

@_KAKEME

@tobixoxooo

@TanteCC

@takaharu_ooi

@ad0reliyahh_

@realifeeamazon

@stw_pdg

@kacteha

@shelovesoj

@Optimistic_She

@SouthernWater

@tekaldas

Alexey Pertsev

@alex_pertsev

1 year

Sorry I was afk for a while, what did I miss? 👀

456

535

3K

Alexey Pertsev

@alex_pertsev

4 years

I just made the contribution #1109 to @TornadoCash Trusted Setup Ceremony! 🚀 Let's make it more secure and trustless #TornadoCashCeremony

31

29

151

Alexey Pertsev

@alex_pertsev

6 years

Slides of "DAO for penetration testers" talk. #ZeroNights2017 #Solidity #ICO

DAO for pentesters

1) Solidity hacks/vulnerabilities/attacks/features. 2) Client side attacks at DApp and ICO landing page. 3) Writeup of Parity bugs. #Solidity #DApp #ICO #ZeroNights2017

speakerdeck.com

1

20

58

Alexey Pertsev

@alex_pertsev

6 years

My speech at dev2dev Moscow meetup by @ParityTech Official page: Video: Slides:

Аудит смарт-контрактов | Алексей Перцев.pdf

drive.google.com

21

15

47

Alexey Pertsev

@alex_pertsev

4 years

0xc618f6f582260be97dfed9d0b82a27a19a2af47b033e423d968884494b6f8576063d570fbda6ef8c59e704804037aeb7dad60b9bb816386afb3c9a22b4ed5da6

1

30

Alexey Pertsev

@alex_pertsev

6 years

My first assumption about GIFT_1_ETH (before any writeup) was "A honeypot creator try to do front-running attack here..." So, this is my exploit for stealing gift. Actually, it use the same trick as honepot (internal transactions).

Bernhard Mueller

@muellerberndt

6 years

Three fun Ethereum honeypots explained

1

9

18

1

4

14

Alexey Pertsev

@alex_pertsev

6 years

How to solve any binary challenge? :D #Solidity #CTF #Part4 @Authio_Team

0

2

12

Alexey Pertsev

@alex_pertsev

6 years

Attention! S in Ethereum stands for Security. Part 2. EVM features Overflow/underflow ABI encoding/decoding Uninitialized storage pointer Type Confusion Backdoors #Ethereum #EVM #Solidity

1

3

11

Alexey Pertsev

@alex_pertsev

6 years

Attention! S in Ethereum stands for Security. Part 4. Tools #Mythril #Manticore #Ethersplay and many others.

Attention! S in Ethereum stands for Security. Part 4. Tools

Представляем четвертую часть цикла, посвященного типичным уязвимостям, атакам и проблемным местам, которые присущи смарт-контрактам на языке Solidity и платформе Ethereum в целом. Здесь мы поговорим...

habr.com

0

2

9

Alexey Pertsev

@alex_pertsev

6 years

New solidity trick is twittable! Just imagine: keccak256("foo", "bar") == keccak256("fo", "obar") is True.

0

1

7

Alexey Pertsev

@alex_pertsev

6 years

When you just NEED to transfer Ether in any case

0

1

9

Alexey Pertsev

@alex_pertsev

6 years

Attention! S in Ethereum stands for Security. Part 3. Solidity in practice Evolution of ether transfer, Inheritance and a few logical flaws. #smartcontract #ethereum

Attention! S in Ethereum stands for Security. Part 3. Solidity in practice

Представляем третью часть цикла, посвященного типичным уязвимостям, атакам и проблемным местам, присущим смарт-контрактам на языке Solidity, и платформе Ethereum в целом. Здесь поговорим о том,...

habr.com

0

1

8

Alexey Pertsev

@alex_pertsev

5 years

The way to get a revert reason of the failed transaction from a smart contact.

0

8

Alexey Pertsev

@alex_pertsev

6 years

Roll the dice wisely. Casino always wins :) #ECDSA #cheating #Signidice @daocasino

0

2

7

Alexey Pertsev

@alex_pertsev

6 years

Attention! S in Ethereum stands for Security. Part 1. Blockchain things.

0

2

5

Alexey Pertsev

@alex_pertsev

6 years

Another possible pitfail (or honeypot). The thing any JS developer knows about. #Hoisting #Solidity #SmartContract

0

4

Alexey Pertsev

@alex_pertsev

6 years

Just finished #CaptureTheEther ctf by @smarx . A lot of pitfalls covered, stable game interface. BIG thx! We are waiting new tasks! :)

1

4

Alexey Pertsev

@alex_pertsev

6 years

Useful links for Zero-knowledge proofs investigation and application in #smartcontracts

GitHub - howardwu/libsnark-tutorial: A zkSNARK tutorial and development environment

A zkSNARK tutorial and development environment. Contribute to howardwu/libsnark-tutorial development by creating an account on GitHub.

github.com

1

4

Alexey Pertsev

@alex_pertsev

6 years

Does the SafeMath really safe? Remember: SafeMath cares about overflows only! #round_off_error @ZeppelinOrg

1

3

Alexey Pertsev

@alex_pertsev

6 years

There is first out transaction of scam donating by @VitalickButter ! But destination address is NOT one of who donate even! People, stop send ether him!!! Almost $6k is stolen!

0

1

3

Alexey Pertsev

@alex_pertsev

6 years

Great research of random numbers at Ethereum! As usual, cryptography saves the world :)

Raz0r

@theRaz0r

6 years

Slides from my @AppSecCali talk "Predicting Random Numbers in Ethereum Smart Contracts": Also check out detailed blog post: #AppSecCali

0

29

34

0

3

Alexey Pertsev

@alex_pertsev

6 years

Notice. I omit some easy googleable resources like "What are zk-SNARKs" of @Zcash and @VitalikButerin 's "Zk-SNARKs: Under the Hood" just because I don't think that is so good to get started.

0

2

Alexey Pertsev

@alex_pertsev

6 years

@MisterCh0c @Authio_Team

Solidity CTF — Part 4: Read the Fine Print

EVM instructions dictate everything within Smart Contracts

medium.com

0

1

Alexey Pertsev

@alex_pertsev

5 years

@jonitzler We were thinking about that during dev. E.g. @TornadoCash can keep the ETH in @compoundfinance to cover network fees. But such economic models reduce or eliminate anonymity. 'Cause at some point you need to calculate interest based on time or other parameters of a deposit.

1

0

2

Alexey Pertsev

@alex_pertsev

6 years

Great job! @Crowd_indicator

Digital Security

@DSecRU

6 years

Digital Security помогла Cindicator избежать инцидентов с безопасностью в ходе ICO:

0

1

2

0

2

Alexey Pertsev

@alex_pertsev

6 years

@theRaz0r Yep :)

Mechanism Design Security in Smart Contracts

Inspired by 2-part series 6 Solidity Vulnerabilities and How to Stop Them, I thought I’d write a bit about some of the more nuanced…

medium.com

0

2

Alexey Pertsev

@alex_pertsev

5 years

@Gonzalo_Garay1 @TornadoCash @torproject @brave Just tested, works like a charm

2

0

2

Alexey Pertsev

@alex_pertsev

6 years

WTF is going on? Coinbase has own implementation of public Ether client or something... Why does it tested so bad?

publiclyDisclosed

@disclosedh1

6 years

Coinbase disclosed a bug submitted by ambisafe: - Bounty: $21,000 #hackerone #bugbounty

0

26

63

0

2

Alexey Pertsev

@alex_pertsev

2 years

@zk_chat 2cfaa950bd806d82410a963feb9a65d0b3458ab65dc5c9c5fd9ff27e51acd1fe

2

0

1

Alexey Pertsev

@alex_pertsev

6 years

Solidity 0.4.22 released. Good news: function can returns array, revert supports error message... Bad news: constructor key word - good intentions but too late. I predict bunch of problems here (possible honeypots at least)

1

0

1

Alexey Pertsev

@alex_pertsev

6 years

Surprise! Any PoA network with more than 5 members is MORE decentralized than current Ethereum (PoW).

0

1

Alexey Pertsev

@alex_pertsev

4 years

@ipfspin @IPFSbot Please follow me

0

1

Alexey Pertsev

@alex_pertsev

6 years

- Давай это как будто Северная корея майнит? - А как? - Ну сделаем себе поддомен на "" - ...

Digital Security

@DSecRU

6 years

Новое приложение для добычи одной из популярных криптовалют может быть связано с КНДР:

0

1

Alexey Pertsev

@alex_pertsev

6 years

@muellerberndt Hi! Exactly. It would be work against front-running attack only The honepot creator deploy his contract and wait someone call SetPass func (at this moment passHasBeenSet == false yet). When it happens he will see it at pending pool and do front-running It just my overthinking:)

0

1

Alexey Pertsev

@alex_pertsev

6 years

@sergeybelove 3/3 Why does it work? It seems Coinbase has custom code above (or instead) official one (Geth or Parity) with a bug. And that code revert last TX only :) I suppose that bug costs much more than $10k 😡

0

1