ERC-8499 derives hash-based post-quantum keys from a BIP-39 phrase. Our notes for the author: take the wallet fingerprint from a public key, not the seed, so a fingerprint written next to the phrase can't test passphrase guesses offline. Stateful instances need a seeded CSPRNG.
zealynxsecurity
An agent that pays by Telegram handle can pay whoever grabbed that handle a minute ago. Resolving the handle to the user id at send time covers renames; the gap left is a handle that changes hands just before send. Pin the id on the first payment and flag a mismatch.
Before Cairo 2.21, a const comparing your own types through a snapshot, tuple or Option skipped your PartialEq and could hold the opposite of the runtime value. Three more const-vs-runtime fixes landed this year, one still unreleased. How to check what built a live class:
A wallet that splits one key between a laptop and a phone is still a plain EOA, so the phone gets permits and EIP-7702 authorizations, not only transfers. Malware on the laptop will ask for those instead. The phone has to decode both, and allow 7702 only for reviewed delegates.
Monad charges a transaction its gas limit, not the gas used. In an ERC-4337 bundle that transaction is the bundler's, and EntryPoint v0.9 needs every op's full call gas limit in the bundle, so the bundler pays for all the unused call gas.
On Cosmos SDK chains a limit kept in a module's params doesn't hold gov back: x/gov runs a passed proposal's messages in order, so one proposal can raise the limit with MsgUpdateParams and spend past it in the same block. Make loosening wait, let tightening apply at once.
The full write-up on Mento's weekend FX prices on Celo: which reads revert, which return Friday's rate, what to pause and what to keep open, and the 73-hour Christmas and New Year closures.
The full write-up, with what to pause and what to keep open over the weekend, and the 73-hour Christmas and New Year closures:
You're all caught up
