2022-08-09-episode-36.md

posted	guid	title	subtitle	description	start-time	itunes-explicit	itunes-episode	itunes-episodeType	youtube-full	discussion	timeline	enclosure-url	enclosure-length	enclosure-type	itunes-duration	participants
true	60700A8D-9927-40E1-8A08-3E28D665C602	The Solidity Bug 0.8.16		The Solidity bug is back and our team is on it! Join them in reviewing the latest contract updates and minifying the bug case. Find out what they discover in the world of decentralized apps.	2022-08-09T18:00:00-05:00	false	36	full	https://youtu.be/ltnFqOWHJhA	https://twitter.com/fulldecent/status/1557168320041861121	seconds title 0 Intro seconds title 49 Follow up -- review Arbitrum/Bridgeworld Harvesters seconds title 369 Solidity blog write up seconds title 423 One trick with Etherscan/Remix seconds title 552 Minimize this test case seconds title 808 The basic testing process (to minimize) seconds title 924 Does it have to be public? seconds title 1150 No zero-length arrays? seconds title 1333 Minify around the helper function seconds title 1420 Minify out the function input seconds title 1525 Published minified test case seconds title 1560 Find this bug in Seaport? seconds title 2172 $3M alpha live on this show? seconds title 2298 Also check the old Wyvern protocol seconds title 2640 Ethics, is livestreaming zerodays good?	https://media.phor.net/csh/2022-08-09-episode-36.m4a	55460613	audio/x-m4a	2756

• The Solidity bug
• Contract review: Arbitrum/Bridgeworld Harvesters
• Minified the bug case significantly from the Ethereum Foundation’s announcement
• Searched for functions in OpenSea’s Seaport repo that are subject to the bug
  • ABI code
    • Find all abi.encode…
    • Find all external calls
  • Dynamic
    • Find strings
    • Find bytes
    • Find []
  • Static
    • [d+]
• Also search contracts for Zora, Binance NFT Marketplace, Foundation
• Got very close, but didn’t find any!
• New Solidity bug Head Overflow Bug in Calldata Tuple ABI-Reencoding | Solidity Blog (soliditylang.org)