
Make Ethereum readable. Source code verification 4byte signatures Clear Signing An @argotorg project and member of @verifalliance
Joined May 2020
- Tweets1K
- Following12
- Followers2.9K
- Likes864
"It has never been easier to run contracts scans"
Some thoughts on gas repricings and their impact.
Gas costs increasing for state operations does not mean they get proportionally more expensive, because the gas limit is increasing. What is the point of increasing the costs of these operations but then also increasing the gas limit? The point is scaling: many other operations are currently overpriced, and, by keeping their gas costs fixed and increasing the gas limit, the protocol recognizes this and increases the supply *of those operations only*. The state operations get *relatively* more expensive than these, but not necessarily more expensive in absolute terms. The overall story is that Ethereum is scaling: the gas limit is going up to 200M after being stuck at 30M for years, and most operations are benefitting from this increase in the gas supply (their gas cost is not changing). The ones that are not, like writing new state, will be subject to further scaling efforts in the future.
This is separate from the question of some smart contracts being affected by the repricings and related changes in the gas mechanism. Largely, the impact is on contracts that in one way or another have hardcoded gas costs or made assumptions about them not changing (e.g. if less than X gas remains then this branch reverts). This is unfortunate but somewhat inevitable when gas costs change, which I think is a fairly inevitable step in scaling Ethereum: the current gas costs are basically a decade old, some operations are much cheaper and some much more expensive than their gas cost implies!
It is also unlikely to be the last time they change, because over time gas costs can drift away from being representative of the actual cost of the operations, exactly what brought us to this point. However, this can be the last time that it affects contracts, if it becomes standard practice to not make assumptions about gas costs in the future. Getting this out of the way can be a step towards more immutability, especially if we work to clearly define which invariants should be guaranteed by the execution layer, so that contracts can be written on a solid foundation.
That said, the impact on contracts should have been more deeply investigated sooner, and perhaps more importantly communication about the change should have been more frequent and more direct. It has never been easier to run contract scans (I was able to find some affected contracts just with a few agents and the @SourcifyEth database), and I think it should be a standard practice for protocol upgrades in the future to run such scans with the latest spec, and that app developers should also be encouraged and given tooling to do so with their contracts.
sourcify.eth retweeted
🧿 🧿 Introducing Onay at the Security Hub 🧿 🧿
@manuel_wedler from @SourcifyEth taking the stage to walk you through 2FA for signing Ethereum txs!
sourcify.eth retweeted
Let’s finally say goodbye to YOLO signing please!
@kaanuzdogan from @SourcifyEth will show you how.
Head over to Jasmine Stage 4 now where he’ll bring everyone up to speed about ERC7730 Clear Signing!
Manuel @manuel_wedler giving a sneak peek into our new experiment
Onay 🧿: 2FA for signing Ethereum transactions
Everything local and open source!
Link 👇
sourcify.eth retweeted
2FA for signing is here!
Head over to Lotus Stage 1 where @manuel_wedler will showcase onay.sh - the latest project from @SourcifyEth to help users understand and verify what they are signing
sourcify.eth retweeted
Multisig approvals should not require reading the function name or bytecode.
Protofire Multisig describes transactions and signed messages in plain words before they are signed, under ERC-7730. Each description is now checked against an independent attestation that confirms it matches what the contract does.
Live on eighteen networks!
Thanks to @sourcifyeth, whose v0.3.0 package we used for the attestation flow.
A description exists only where the protocol published one, and the standard is still a draft.
Treat it as an extra check. Your judgment still signs.
app.safe.protofire.io
sourcify.eth retweeted
Two @SourcifyEth talks back to back today @EFDevcon:
• 15:30 IST, Lotus 1: @manuel_wedler, What does it take to trust a transaction end to end?
• 16:00 IST, Jasmine 4: @kaanuzdogan, Goodbye YOLO signing
Different stages, so leave a few minutes for the walk.
Sourcify taking @EFDevcon stages with two talks today:
- 15:30 Lotus Stage 1 @manuel_wedler will give a teaser to our new experiment onay.sh to finally know and verify what you are signing
- 16:00 Jasmine Stage 4 @kaanuzdogan to bring everyone up to speed to ERC7730 Clear Signing: where we are and how it works
sourcify.eth retweeted
Solar ☀️ → Sourcify ✅
Contracts compiled with Solar now verify on Sourcify, with exact matches, straight from Foundry:
forge verify-contract <address> <Contract> --use solar --verifier sourcify
Thanks for having us today @arkivnetwork!
Yesterday we shared that our verified Ethereum Mainnet contracts are now available on the Arkiv testnet. Today we showed how it works and how to query the dataset.
Chat about us throughout the week if you want to learn more!
sourcify.eth retweeted
A snapshot of Sourcify's verified Ethereum Mainnet contracts is now available as a queryable dataset on @arkivnetwork testnet, as part of a pilot we ran with the Arkiv team.
Filter the whole set by compiler, match, deployer or block. Details and how to query it: docs.arkiv.network/
Our verification data stays where it is; this is a second way to read it.
Solar ☀️ → Sourcify ✅
Contracts compiled with Solar now verify on Sourcify, with exact matches, straight from Foundry:
forge verify-contract <address> <Contract> --use solar --verifier sourcify
A snapshot of Sourcify's verified Ethereum Mainnet contracts is now available as a queryable dataset on @arkivnetwork testnet, as part of a pilot we ran with the Arkiv team.
Filter the whole set by compiler, match, deployer or block. Details and how to query it: docs.arkiv.network/
Our verification data stays where it is; this is a second way to read it.
We’ve mirrored @SourcifyEth verified mainnet data on [ ARKIV ] ’s testnet. A working pilot you can try today 👇
Live demo at Devcon tomorrow, Booth Core 03.
sourcify.eth retweeted
Here's how it all works @SourcifyEth
Curious? Find @SantiagoDevRel on site @EFDevcon for demo + more!
teapaw.org/arkivnetwork/status/21…
We’ve mirrored @SourcifyEth verified mainnet data on [ ARKIV ] ’s testnet. A working pilot you can try today 👇
Live demo at Devcon tomorrow, Booth Core 03.
sourcify.eth retweeted
An on-chain short story brought to you by @kaanuzdogan and @SourcifyEth at DSS today




















![[ ARKIV ] × Sourcify: verified contracts you can filter](https://pbs.twimg.com/media/HVzalvqacAAdM6L.jpg)


