Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

ENS is a naming service for wallets, websites and more. In March of 2022, there was a vote to replace the existing price oracle. The original interface returned 1 value but the new interface returned 2. These were the registration fee and premium instead of just the total.

The price oracle was updated to return two. However, the calling code was only expected to return 1. So, the registration fee was the only value being used, making the domains cheaper than they should have been.

The issue was discovered shortly after the proposal was made. While testing slightly different code, the issue was discovered and the voters were made aware of the issue. Overall, it's weird this wasn't caught during initial testing. I'm surprised we don't see more migration issues like this.