Uniswap CCA: Security Considerations for Auditors
The vectors below are specific to CCA's architecture. Some are documented by Uniswap itself, some emerge from the mechanism, and one was found by us during an audit of a protocol built on top of CCA.
Smart Contract Auditing
Latest articles
Rounding Errors For Auditors
When working with arithmetic operations in Solidity, it is very difficult to avoid potential inaccuracies due to precision loss. These sometimes small discrepancies might lead to HUGE miscalculations if not handled properly. Precision loss and roundi...
ERC20 Weirdness & Attacks Part 1
The ERC20 specification is one of the oldest token standards on Ethereum. When it was first created the creators themselves could not foresee all of the issues that would come from the standard being so loosely defined. In smart contract auditing, yo...
The War Dogs Approach to Auditing Smart Contracts
Most people tend to go for the biggest wins when auditing smart contracts. Truth is I think it's the way to make the most money in the LONG RUN, but I found it's not the best fit for me and how I audit. I tend to take more of a War Dogs approach. Wha...