Skip to content

Instantly share code, notes, and snippets.

View maurelian's full-sized avatar
💯

Maurelian maurelian

💯
View GitHub Profile

Verifying Correctness of the Safe Extensions Bytecode

The following steps can be taken in order to verify that the Safe Modules and Guard match the governance approved source code, and should work with tooling you already have. Do these from the root directory of the superchain-ops repo.

  1. Update forge by running: foundryup.
  2. Clone the Optimism monorepo: git clone https://github.com/ethereum-optimism/optimism.git
  3. cd optimism
@maurelian
maurelian / gist:e9a226782c1830376ac79baf87447002
Last active October 5, 2023 16:42
vrepo (view repo) alias for getting source and opening it in your editor quickly.
vrepo () {
if [[ $# -ne 1 ]]
then
echo "Usage: vRepo <github URL or org/repo-name>"
return 1
fi
if [[ $1 == *"github.com"* ]]
then
urlPath=$(echo $1 | sed 's/.*github.com\///')
org=$(echo $urlPath | cut -d '/' -f1)
@maurelian
maurelian / chat
Last active July 13, 2023 16:24 — forked from spullara/chat
Use this command to get suggestions on how to do things on the command line.
#!/bin/bash
TOKEN=< OpenAI token from https://platform.openai.com/account/api-keys >
PROMPT="You are the best at writing shell commands. Assume the OS is Ubuntu. I want you to respond with only the shell commands separated by semicolons and no commentary. Here is what I want to do: $@"
RESULT=`curl -s https://api.openai.com/v1/chat/completions \
-H 'Content-Type: application/json' \
-H "Authorization: Bearer $TOKEN" \
-d "{
\"model\": \"gpt-3.5-turbo\",
\"messages\": [{\"role\": \"user\", \"content\": \"$PROMPT\"}]
}" | jq '.choices[] | .message.content' -r`
@maurelian
maurelian / twitter_is_down.txt
Last active June 29, 2023 22:13
Official gist for discussing future twitter outages
That's OK. We can still talk about it here, right?
...
Right?
@maurelian
maurelian / gpt-ownable-non-bug.md
Created December 12, 2022 16:25
Smart contract bug reported by chatGPT

Description

A security vulnerability has been identified in the Ownable contract. The vulnerability lies in the constructor function, which allows anyone to become the owner of the contract without any authentication or authorization. This could potentially allow malicious actors to gain control of the contract and use it for malicious purposes.

The vulnerability can be exploited by sending a transaction to the contract from any address. This would set the _owner variable to the address of the sender, granting them full control of the contract. This could allow malicious actors to modify the contract, transfer funds, or otherwise

0x1889dc51448166ca751b713f4532e293c9f22cbd7a2354ec4c1ec18012cf50ec

@maurelian
maurelian / synthetix-changes-checklist.md
Last active October 25, 2021 18:00
SIP-182 Review Checklist for Optimism Regenesis

Checklist used to review this PR to ensure no breaking changes after regenesis. Based on the changeset doc.

  1. Unverified contracts

    • Contracts whose source code has not been verified on Etherscan (Kovan, Optimistic Ethereum) will be wiped out along with their storage.
    • NOTE: Please very that you're not calling any unverified contracts.
  2. Contracts whose source code has been verified will be recompiled with the standard Solidity compiler. As a result of this:

  3. The EXTCODEHASH and CODESIZE of every contract will change.

List of key breaking changes to watch for:

  1. Unverified contracts:

    1. Contracts whose source code has not been verified on Etherscan (Kovan, Optimistic Ethereum) will be wiped out along with their storage.
  2. Contracts whose source code has been verified will be recompiled with the standard Solidity compiler. As a result of this:

@maurelian
maurelian / HowToOVM2.md
Last active October 11, 2021 19:33
Tutorial for modifying solidity (or any evm) contracts to run on OVM2.0