building-secure-contracts
pooltogether-community-ui
building-secure-contracts | pooltogether-community-ui | |
---|---|---|
10 | 20 | |
2,076 | 45 | |
0.6% | - | |
8.4 | 2.2 | |
9 days ago | 12 months ago | |
Solidity | JavaScript | |
GNU Affero General Public License v3.0 | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
building-secure-contracts
-
Smart Contract Security Field Guide
I appreciate how organized the Consensys guide is laid out. It's pretty easy to read. Trail of Bits has a similar guide that is a little more in-the-weeds technically. It also covers, what we think is, essential background about certain automated analysis techniques like static analysis and how fuzzers work. Check it out!
https://secure-contracts.com/
- Trail of Bits Building Secure Contracts: Now with support for Cosmos
- Trail of Bits Building Secure Contracts: Now with support for Substrate
- New release of Building-secure-contracts: it introduces not so smart contracts for Algorand/Cairo/Cosmos/Substrate - a set of common vulnerabilities for these chains. The release contains also new training materials for Echidna and new guidelines
- Trail of Bits added Algorand to their "Building Secure Contracts" developer guide
-
Launching your Ethereum dApp on Avalanche
We highly recommend using at least one of them if professional contract security review is not possible. A more comprehensive look into secure development practices can be found here.
-
Smart Contract Exploitation Repository
If you need more reading about building secure smart contracts and auditing workflows, see here: https://github.com/crytic/building-secure-contracts
- Any recommendations for smart contract auditing ?
pooltogether-community-ui
-
Smart Contract Security Field Guide
First off, wanted to say thanks very much for posting this, primarily because I think it is an example that is straightforward and easy to understand. That said, I'm also thinking "if this is one of the best, straightforward examples people are talking about when referring to 'the value of smart contracts', then smart contracts are just nowhere near the important tech its boosters believe." (To be clear mteigers, not directing this at you, just saying this because what you've posted is probably the best example of a real-world use case I've seen).
In summary, what PoolTogether (https://pooltogether.com/) does is basically act like a normal savings account, except instead of you getting 4% interest a year or whatever, that interest is all pooled and then given out in big chunks at random - most people get nothing, but "winners" will get what is essentially everyone else's interest. Some notes:
1. I'm not clear what activity they're engaging in that actually generates interest (e.g. who they're lending to in order to generate a spread), but in fairness I didn't spend much going into the details. That said, if they really are generating income by lending, then I'm very curious how they can't suffer from some of the same negative edge-cases inherent in fractional reserve banking, like a run on the bank. If they are not generating real income from lending, I'm very suspect about how they can really be generating interest. Again, I didn't look much into this, so totally admit I could just not be understanding the details here.
2. I see absolutely no real benefit that comes from doing this as a smart contract vs. just doing this as any other kind of normal software (e.g. what core banking software provides), despite what their blurbs on the website say.
So still just dumbfounded by the lack of real utility in any of these smart contract examples I've seen.
-
New Landing Page is live! 📣
Take a look: https://pooltogether.com
-
Unlocking Direct Engagement: How Innovative DeFi Companies Harness Push Protocol in the Web3 Revolution
PoolTogether: Transforming Savings Games and Lotteries
-
PBS Crypto Decoded | NOVA (2023) [00:53:32]
How about defend a prize-linked savings program from an individual that placed around $12 into the protocol before immediately filing a lawsuit?
- Last day before next draw at moneropot.org
-
DEFI is not the place where you can increase your deposit
Have you checked out PoolTogether. You earn yield in the form of prizes and if you deposit on optimism you also earn OP tokens. It’s like a DeFi savings account for USDC. Worth looking into if you haven’t already.
-
Tell me about your DAO
Pooltogether uses their token for governance but you absolutely do not need to have it to use the product or participate in anything. It’s strictly used for voting in governance. No blockers
-
Show HN: Web3 is not community-led, as much as they try to claim they are
There's literally one project that I've seen being truly useful: https://pooltogether.com/
It's cool because it's not possible to do this without crypto (in terms of trust). But because it uses a smart contract you can be sure that when you put your money into it, it won't steal it.
-
'Predatory gambling' has helped the lottery reach sky-high jackpot, critics say
We could easily incentivize no-loss lotteries like https://pooltogether.com/ I wonder how that affects problem gamblers? If there's no opportunity to actually lose anything do problem gamblers choose other options?
-
Favourite 1-100 Million M/Cap Sleepers?
POOL - PoolTogether https://pooltogether.com/ Open source pooled savings account/lottery with twice weekly draws
What are some alternatives?
eth-security-toolbox - A Docker container preconfigured with all of the Trail of Bits Ethereum security tools.
aave-v3-core - This repository contains the core smart contracts of the Aave V3 protocol.
slither - Static Analyzer for Solidity and Vyper
protocol - Enzyme Protocol Implementation
coreth - Code and wrapper to extract Ethereum blockchain functionalities without network/consensus, for building custom blockchain services.
l2beat - L2BEAT is an analytics and research website about Ethereum layer two (L2) scaling solutions.
avalanche-faucet - Avalanche Faucet for Fuji Network and Subnets.
v3-core - 🦄 🦄 🦄 Core smart contracts of Uniswap v3
avalanchego - Go implementation of an Avalanche node.
snapshot - Interface for Snapshot. Join us on Discord http://discord.snapshot.org
mythril - Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Hedera, Quorum, Vechain, Rootstock, Tron and other EVM-compatible blockchains.
bolts - BOLT: Basis of Lightning Technology (Lightning Network Specifications)