Blog

Article delves into the intricacies of ERC20 token transfers in DeFi protocols, demostrating potentical security problems and outlining essential best practices for effectively implementing these mechanisms.

This article details the challenges encountered during the upgrade of Aave from version v3.0 to v3.1. It provides a deep dive into the invariant that ensures liquidity and stability in Aave markets, analyzing how discrepancies in this mathematical condition were identified and addressed.

A compilation article summarizing new features and improvements in modern lending protocol implementations, based on insights from previous articles.

The article provides an in-depth exploration of the Aave V3 protocol, detailing its implementation and technical architecture. It delves into the internal algorithms and implementation tricks, as well as the new features introduced in V3.

The article explores the technical intricacies and security aspects of the Morpho Blue lending protocol. The article examines its architecture, highlights key features, and implementation details.

Article about the design and implementation of Ajna protocol - an innovative lending project with no governance and no external oracles.

Article about Fluid project, its base liquidity layer and innovative protocol Vault, built upon it. We will review important code parts and discuss the key design patterns of this interesting project.

Article about Curve LlamaLend protocol, its key design features, and implementation details.

First article from the series about modern lending protoocls about technical design, key featuers and implementation of Euler V2 protoocol.

An article, explaining algorithms, maths and implementation details of the concentrated liquidity and ticks in Uniswap V3.

Article about different practical aspects of fuzzing of the real-world smart-contracts with Echidna, using Uniswap V3 liquidity providing as an example.

The article explains how the Foundry smart contract development framework can be used to study hacks. It can be a useful workflow for beginners who prefer studying hacks as a step in mastering Solidity skills.

Explore the security analysis of ZK applications, focusing on Circom and featuring Tornado Cash. Uncover critical code sections, delve into ZK algorithm security, and gain insights into real-world analysis methods.

crvUSD by Curve, was audited by MixBytes. The audit focused on the AMM and Controller contracts where we found two critical vulnerabilities which were fixed during the audit.

In our new article we delve into the key concepts of different Liquid Staking protocols. Additionally, we shed light on potential security problems that may arise when integrating liquid staking tokens integration into other protocols.

ChatGPT has brought about a considerable transformation in programming and research. This article will delve into various prompts that can be immensely beneficial for a security auditor.

Let's talk about Account Abstraction in more detail and look at some interesting examples.

We’ve discovered an intriguing bug that could potentially serve as an attack vector for some DeFi projects. This bug is specifically associated with the well-known ERC777 token standard.

The second article highlighting practical aspects of zk-SNARKs usage with the review of zk-related projects and SNARK-friendly algorithms.

In this article, learn about BendDAO, an NFT lending protocol offering instant liquidity for blue-chip NFTs.

In this long read, we explore the rise of P2P lending in DeFi, with a focus on Morpho, and reveal key findings in this fascinating product direction.

Learn about the MixBytes Сamp SoulBound Token (SBT), designed to help smart contract auditors demonstrate their qualifications and skills.

Meet our first article on ZK proofs that bridges the gap between basic and expert knowledge, and get ready to dive into hands-on development.

In this piece, we explore the development patterns for smart contracts in two seemingly disparate environments: Ethereum/EVM and Polkadot's Substrate/WASM.

From Aug 1, 2023, MixBytes will cease Lido's Polkadot & Kusama support. The team is considering technically backing a dedicated DotSama native liquid staking solution.

In this article we explore techniques that allow one to create a smart contract at a specific address and then change its internal logic by modifying the bytecode that processes user data.

In this article, we will delve into the details of inflation attacks and provide tips on protecting against them.

This article describes our independent study of the main vulnerabilities of projects on Substrate and the tools that can help automize the audit.

In this article, we will provide an overview of blockchain bridge hacks and discuss ways to prevent and mitigate these attacks.

In this article we will try to go through the core security vulnerabilities common to the lending protocol.

Forta is a real-time detection network for the security & operational monitoring of blockchain activity.

In this article, we continue to research common pitfalls of stablecoins. In the previous article, we provided a security checklist and analyzed Magic Internet Money (MIM), an overcollateralized stablecoin.

In this article we will outline the security issues encountered in yield aggregators, a very common type of projects in DeFi.

There are many stablecoins that attempt to achieve their peg algorithmically or through collateralization, and there are at least 23 failed projects as of today.

What potential vulnerabilities exist in blockchains that have an Ethereum-like VM?

Cairo is a programming language for writing provable programs, where one party can prove to another one that a certain computation has been executed correctly.

A decentralized autonomous organization (DAO) operates in a blockchain and is governed by voting. Coin voting is the most popular one: a member of a DAO makes a proposal and other coin holders cast their approval with tokens.

As you know, in the EVM there are two opcodes to make a create and create2 smart contract from another smart contract. Such contracts are also called a factory.

Hardhat has a cool feature to manually set the value of any storage slot with hardhat_setStorageAt.

The Lido on Polkadot First Stage was launched on May 31st, 2022 and is performing great. We are thrilled to share that we are ready to move to the Second Stage.

MixBytes launches first Lido stDOT stable pool on Curve

Three months after the launch of Lido on Kusama, MixBytes are proud to announce that we are launching Lido on Polkadot Liquid Staking today, May 31st, 2022!

The First Stage was launched on February 18th, 2022 and is performing nice and steady. We are excited to announce that we are ready to move to the Second Stage.

MixBytes is proud to announce the launch of Lido Liquid staking for Kusama on Moonriver.

One of the most exciting features of DeFi is interoperability which allows constructing protocols using deployed smart contracts as base blocks for your protocol (e.g. Yearn Strategies).

A lot of existing projects use the new third version of a well-known Uniswap protocol as Oracle to get current price for many assets.

Developing smart contracts with the Solidity or Vyper programming language always leads to creating some tests in a special environment.

The MixBytes team has started the collaboration with Robonomics and its ecosystem projects to help perform the initial research and build proof-of-concept products for two projects.

This article is about one of the new, serious challenges for DeFi projects, which in the previous financial reality worries only a small number...

Have you noticed that when we talk about blockchain performance, we usually name approximate numbers?

We are pleased to announce that Mixbytes begins a partnership with Robonomics. The development teams will work on the functionality for cross-chain interaction...

From now on, we will be able to provide technical help, development support, and consulting services to external teams and companies aiming to build custom Substrate solutions.

Testing is often neglected or put on the back burner. At MixBytes, we don’t think development must be the only priority.

MixBytes is a Blockchain development company that has proved its worth by delivering upscale software solutions to clients across the globe.

The MixBytes team is grateful to Web3 Foundation for their trust and opportunity to participate in the development of the Parity Substrate infrastructure.

Software development often involves tasks that should be performed at regular intervals.

As many cryptographic concepts, “Publicly Verifiable Random Beacon” protocols...

In this article we will focus on solutions using collective random number generation...

This is the second article in the series “Upgradable Smart Contracts: Storage Highlights and Challenges”.

This is the first article in the series "Upgradable Smart Contracts: Storage Highlights and Challenges".

This article is NOT a rating of automated analyzers. I use them for my own contracts: deliberately add pseudo-errors and study the responses.

Learn about the MixBytes Сamp SoulBound Token (SBT), designed to help smart contract auditors demonstrate their qualifications and skills.

From Aug 1, 2023, MixBytes will cease Lido's Polkadot & Kusama support. The team is considering technically backing a dedicated DotSama native liquid staking solution.

The Lido on Polkadot First Stage was launched on May 31st, 2022 and is performing great. We are thrilled to share that we are ready to move to the Second Stage.

MixBytes launches first Lido stDOT stable pool on Curve

Three months after the launch of Lido on Kusama, MixBytes are proud to announce that we are launching Lido on Polkadot Liquid Staking today, May 31st, 2022!

The First Stage was launched on February 18th, 2022 and is performing nice and steady. We are excited to announce that we are ready to move to the Second Stage.

MixBytes is proud to announce the launch of Lido Liquid staking for Kusama on Moonriver.

The MixBytes team has started the collaboration with Robonomics and its ecosystem projects to help perform the initial research and build proof-of-concept products for two projects.

We are pleased to announce that Mixbytes begins a partnership with Robonomics. The development teams will work on the functionality for cross-chain interaction...

From now on, we will be able to provide technical help, development support, and consulting services to external teams and companies aiming to build custom Substrate solutions.

MixBytes is a Blockchain development company that has proved its worth by delivering upscale software solutions to clients across the globe.

The MixBytes team is grateful to Web3 Foundation for their trust and opportunity to participate in the development of the Parity Substrate infrastructure.

Article delves into the intricacies of ERC20 token transfers in DeFi protocols, demostrating potentical security problems and outlining essential best practices for effectively implementing these mechanisms.

This article details the challenges encountered during the upgrade of Aave from version v3.0 to v3.1. It provides a deep dive into the invariant that ensures liquidity and stability in Aave markets, analyzing how discrepancies in this mathematical condition were identified and addressed.

A compilation article summarizing new features and improvements in modern lending protocol implementations, based on insights from previous articles.

The article provides an in-depth exploration of the Aave V3 protocol, detailing its implementation and technical architecture. It delves into the internal algorithms and implementation tricks, as well as the new features introduced in V3.

The article explores the technical intricacies and security aspects of the Morpho Blue lending protocol. The article examines its architecture, highlights key features, and implementation details.

Article about the design and implementation of Ajna protocol - an innovative lending project with no governance and no external oracles.

Article about Fluid project, its base liquidity layer and innovative protocol Vault, built upon it. We will review important code parts and discuss the key design patterns of this interesting project.

Article about Curve LlamaLend protocol, its key design features, and implementation details.

First article from the series about modern lending protoocls about technical design, key featuers and implementation of Euler V2 protoocol.

An article, explaining algorithms, maths and implementation details of the concentrated liquidity and ticks in Uniswap V3.

Article about different practical aspects of fuzzing of the real-world smart-contracts with Echidna, using Uniswap V3 liquidity providing as an example.

Explore the security analysis of ZK applications, focusing on Circom and featuring Tornado Cash. Uncover critical code sections, delve into ZK algorithm security, and gain insights into real-world analysis methods.

crvUSD by Curve, was audited by MixBytes. The audit focused on the AMM and Controller contracts where we found two critical vulnerabilities which were fixed during the audit.

In our new article we delve into the key concepts of different Liquid Staking protocols. Additionally, we shed light on potential security problems that may arise when integrating liquid staking tokens integration into other protocols.

ChatGPT has brought about a considerable transformation in programming and research. This article will delve into various prompts that can be immensely beneficial for a security auditor.

Let's talk about Account Abstraction in more detail and look at some interesting examples.

We’ve discovered an intriguing bug that could potentially serve as an attack vector for some DeFi projects. This bug is specifically associated with the well-known ERC777 token standard.

In this article, learn about BendDAO, an NFT lending protocol offering instant liquidity for blue-chip NFTs.

In this long read, we explore the rise of P2P lending in DeFi, with a focus on Morpho, and reveal key findings in this fascinating product direction.

In this piece, we explore the development patterns for smart contracts in two seemingly disparate environments: Ethereum/EVM and Polkadot's Substrate/WASM.

In this article we explore techniques that allow one to create a smart contract at a specific address and then change its internal logic by modifying the bytecode that processes user data.

In this article, we will delve into the details of inflation attacks and provide tips on protecting against them.

This article describes our independent study of the main vulnerabilities of projects on Substrate and the tools that can help automize the audit.

In this article, we will provide an overview of blockchain bridge hacks and discuss ways to prevent and mitigate these attacks.

In this article we will try to go through the core security vulnerabilities common to the lending protocol.

In this article, we continue to research common pitfalls of stablecoins. In the previous article, we provided a security checklist and analyzed Magic Internet Money (MIM), an overcollateralized stablecoin.

In this article we will outline the security issues encountered in yield aggregators, a very common type of projects in DeFi.

There are many stablecoins that attempt to achieve their peg algorithmically or through collateralization, and there are at least 23 failed projects as of today.

What potential vulnerabilities exist in blockchains that have an Ethereum-like VM?

Cairo is a programming language for writing provable programs, where one party can prove to another one that a certain computation has been executed correctly.

A decentralized autonomous organization (DAO) operates in a blockchain and is governed by voting. Coin voting is the most popular one: a member of a DAO makes a proposal and other coin holders cast their approval with tokens.

This article is about one of the new, serious challenges for DeFi projects, which in the previous financial reality worries only a small number...

Testing is often neglected or put on the back burner. At MixBytes, we don’t think development must be the only priority.

Software development often involves tasks that should be performed at regular intervals.

As many cryptographic concepts, “Publicly Verifiable Random Beacon” protocols...

In this article we will focus on solutions using collective random number generation...

This article is NOT a rating of automated analyzers. I use them for my own contracts: deliberately add pseudo-errors and study the responses.

The article explains how the Foundry smart contract development framework can be used to study hacks. It can be a useful workflow for beginners who prefer studying hacks as a step in mastering Solidity skills.

The second article highlighting practical aspects of zk-SNARKs usage with the review of zk-related projects and SNARK-friendly algorithms.

Meet our first article on ZK proofs that bridges the gap between basic and expert knowledge, and get ready to dive into hands-on development.

Forta is a real-time detection network for the security & operational monitoring of blockchain activity.

As you know, in the EVM there are two opcodes to make a create and create2 smart contract from another smart contract. Such contracts are also called a factory.

Hardhat has a cool feature to manually set the value of any storage slot with hardhat_setStorageAt.

One of the most exciting features of DeFi is interoperability which allows constructing protocols using deployed smart contracts as base blocks for your protocol (e.g. Yearn Strategies).

A lot of existing projects use the new third version of a well-known Uniswap protocol as Oracle to get current price for many assets.

Developing smart contracts with the Solidity or Vyper programming language always leads to creating some tests in a special environment.

This is the second article in the series “Upgradable Smart Contracts: Storage Highlights and Challenges”.

This is the first article in the series "Upgradable Smart Contracts: Storage Highlights and Challenges".