0xebby
- 10 skills
- 0 followers
- 2 hours ago last updated
- ▌ Oracle Safety · 0xebbyConsume external data (prices, off-chain metrics, aggregates) without trusting a single manipulable reading — staleness checks, bounds, TWAP over spot, and report/use separation with a dispute window. Use whenever on-chain logic depends on a value from outside the contract.
- ▌ Escrow Accounting · 0xebbyCustody and release funds correctly; internal ledger over balanceOf, debit-before-transfer, pull payments, and an explicit state machine with terminal states. Use when building escrow, vesting, streaming, payment splitters, or any hold-and-release vault.
- ▌ Reentrancy Guards · 0xebbyPrevent reentrancy on any function that makes an external call — token transfers, ETH sends, calls into unknown contracts. Use checks-effects-interactions first, a guard second.
- ▌ Singleton Vs Clones · 0xebbyChoose deployment architecture when you need many instances of the same logic — full deploy per instance, EIP-1167 minimal-proxy clones, or a single singleton keyed by a params hash. Use when a factory does `new Contract(...)` in a loop or per user action.
- ▌ Fixed Point Rounding · 0xebbyDo fixed-point arithmetic without overflow or precision loss, and always round in the protocol's favor. Use when computing shares, proportional payouts, interest, prices, or any a*b/c where inputs are large or user-controlled.
- ▌ Safe Erc20 Transfers · 0xebbyMove ERC-20 tokens safely across non-standard implementations (no-return, fee-on-transfer, approve-race). Use whenever a contract calls transfer, transferFrom, or approve on a token it does not control.
- ▌ Defensive Programming · 0xebbyThe baseline mindset and antipattern catalogue for smart-contract security — minimalism, reuse, input validation, and the common vulnerability classes with their fixes. Use at the start of any contract work and as a pre-audit self-review.
- ▌ Two Step Access Control · 0xebbyChoose and wire the weakest sufficient access-control primitive — Ownable, Ownable2Step, or roles — and never leave a funds-affecting owner on single-step transfer. Use when adding any privileged function.
- ▌ Pausable Circuit Breaker · 0xebbyAdd an emergency stop that halts entry paths (deposits, new orders) while never trapping user exits (withdrawals, claims). Use when a protocol moves money and you need a response to a discovered bug.
- ▌