chainsecurity

On October 22, the smart contract security company ChainSecurity announced that the Glamsterdam hard fork on the Ethereum Hoodi testnet has been postponed. Researchers stated that security impacts have been found in existing contracts and identified 13 real cases, and they are currently conducting responsible disclosure with the affected projects. The announcement requests teams to review the contracts, and the Ethereum Foundation is assessing the scope of the impact; the announcement did not name the projects, provide contract addresses, or give an alternative fork date.The related issues involve contracts that continue execution after capturing failed external calls. Under the reviewed gas changes, the failure handler may complete execution, whereas it would previously roll back due to gas exhaustion. The caller can deliberately provide insufficient gas to complete the target operation, but enough to allow the outer contract to record a permanent failure, causing operations that could have been retried to lose their recovery path.The technical disclosure reviews EIP-8037 and EIP-8038 from the version specification dated October 13, where the gas examples described are for proposed execution behavior. The state-gas reservoir will be fully passed with the call, and forwarding restrictions apply to execution gas, with gasleft() only reporting the execution balance. According to the reviewed rules, clearing storage slots that start at zero at the beginning of a transaction can replenish up to 97,920 execution gas; intermediary contracts may also credit back the accounted state-creation fees upon REVERT and return them to the caller.

ChainCatcher news, stUSDT announced a partnership with ChainSecurity to conduct a comprehensive security audit of its smart contracts, and has published the complete security audit report and white paper on its official website. Based on the recommendations from the security audit, the stUSDT platform completed a contract upgrade on June 24 and has been closely monitoring the upgraded system to ensure all functions are operating normally. Meanwhile, stUSDT has officially released the complete security audit report and white paper on its official website.The security audit report provides a detailed account of the security audit results conducted by ChainSecurity, with no critical or high-risk vulnerabilities found during the review. The white paper comprehensively outlines the architectural design and governance structure of the stUSDT protocol, as well as the technological foundation that ensures the safety and reliability of user investments.It is reported that ChainSecurity is a top security audit company in Europe and the United States, having provided security audit services for well-known institutions or projects such as the Ethereum Foundation, Circle, Polygon, Uniswap, MakerDAO, Curve, Compound, Yearn, and Lido. stUSDT is the first rebase-based RWA protocol and is currently operating through the decentralized platform JustLend DAO. The stUSDT platform aims to bridge the gap between individual and institutional investors, as well as the crypto world and the real world, providing a fairer RWA investment channel for everyone. Currently, the total staking amount of stUSDT exceeds $271 million, with an APY of 4.64%.