500 days of Security Summer
summary
Title nods to a long effort but describes six months of intense security work on Uniswap v4, nine audits plus a ~$2.2M audit competition, and a switch to Foundry for fuzzing and ffi math checks. Design choices lock hooks to granular flags to prevent bricked liquidity, and custom curves keep the invariant that user balances change by the exact specified amount. Tests use a generalized actions router that became production code, and integration helpers like Delta resolver and a clear() function remove dust.
AI-written summary · about
chapters (10)
- 0:00500 days of Security Summer
- 1:46V4 architecture security design
- 3:30Hooks and permission controls
- 6:39Custom curves trade-offs
- 11:00Testing with Foundry
- 13:12Actions router testing
- 15:38PR reviews and security
- 16:43Audit process overview
- 18:55Post-audit security plans
- 19:43Q&A
related talks
19mSecure by Design
21mOverview of the Last Year of Audits, Reviews, and Proofs
17mMakerDAO Smart Contract Safety - When Billions are at Stake
19msub0 Asia 2024 - Philip Stanislaus and Christian Vari (Oak Security)
30mSmart-Contract Security 201: Auditing Lessons for Solana Founders
22mA Multi-Layer Dynamic Security Framework for DeFi Smart Contracts
31mNeed of Web 3.0 Security
24mTrillion Dollar Security Initiative