maurelian

vrepo () {
	if [[ $# -ne 1 ]]
	then
		echo "Usage: vRepo <github URL or org/repo-name>"
		return 1
	fi
	if [[ $1 == *"github.com"* ]]
	then
		urlPath=$(echo $1 | sed 's/.*github.com\///')
		org=$(echo $urlPath | cut -d '/' -f1)

maurelian

#!/bin/bash
TOKEN=< OpenAI token from https://platform.openai.com/account/api-keys >
PROMPT="You are the best at writing shell commands. Assume the OS is Ubuntu. I want you to respond with only the shell commands separated by semicolons and no commentary. Here is what I want to do: $@"
RESULT=`curl -s https://api.openai.com/v1/chat/completions \
  -H 'Content-Type: application/json' \
  -H "Authorization: Bearer $TOKEN" \
  -d "{
  \"model\": \"gpt-3.5-turbo\",
  \"messages\": [{\"role\": \"user\", \"content\": \"$PROMPT\"}]
}" | jq '.choices[] | .message.content' -r`

maurelian

Feel free to copy and paste this list into a README, issue or elsewhere in your project.

Audit prep checklist (reference)

• Documentation (A plain english description of what you are building, and why you are building it. Should indicate the actions and states that should and should not be possible)
  • For the overall system
  • For each unique contract within the system
• Clean code
  • Run a linter (like EthLint)
• Fix compiler warnings

maurelian

That's OK. We can still talk about it here, right? 
...
Right?

maurelian

NSLOC stands for 'Normalized Source Code', which is a custom measurement we use (among others) when evaluating the complexity of a codebase.

To get the NSLOC count of a file:

1. For all functions, reduce any multiline function declarations to a single line.
2. Remove all comments
3. Remove all empty lines
4. Count the remaining lines

Example:

maurelian

Description

A security vulnerability has been identified in the Ownable contract. The vulnerability lies in the constructor function, which allows anyone to become the owner of the contract without any authentication or authorization. This could potentially allow malicious actors to gain control of the contract and use it for malicious purposes.

The vulnerability can be exploited by sending a transaction to the contract from any address. This would set the _owner variable to the address of the sender, granting them full control of the contract. This could allow malicious actors to modify the contract, transfer funds, or otherwise

maurelian

pragma solidity ^0.4.10;

// Based on Alex Miller's design, with minor revisions to appease the compiler, and incorporate Christian Lundkvist's
// input about hash collisions.

contract Bitcoin {

	struct UTXO {
       address owner;
       uint value;

maurelian

Ethereum Composability Security Guidelines

The following is an informal compendium of ways you can screw up when mixing and matching smart contracts:

ERC20

• Be aware of front running on changes to the allowed value.
• Be aware that some tokens don't return a boolean on success or failure.
• Some token balances change overtime, even without a transfer.
• Use balanceOf(addr) over internal accounting. (https://medium.com/trustless-fund/atoken-withdrawal-vulnerability-disclosure-5d8eadc64539)

maurelian

0x1889dc51448166ca751b713f4532e293c9f22cbd7a2354ec4c1ec18012cf50ec

maurelian

pragma solidity ^0.4.10;

// Update: Just use HardHat's: https://github.com/nomiclabs/hardhat/blob/master/packages/hardhat-core/console.sol

// Enables event logging of the format `console.log('descriptive string', variable)`, 
// without having to worry about the variable type (as long as an event has been declared for that type in the 
// Console contract.

contract Console {
    event LogUint(string, uint);