May 20, 2024

Web3 Builder News 5/13-5/19: Infinex Launched Bug Bounty Program up to $1M USDC

Rollchains introduces development platform Spawn

Grants & Accelerators

Worldcoin Foundation introduces the Community Grants Program and applications for Wave1 are open now.
Ethereum Foundation announces that the applications are now open for the fifth cohort of the Ethereum Protocol Fellowship (EPF5). The fellows will be able to engage with Ethereum core developers and fellowship peers.
Nibiru Chain has launched the “Nibiru 0 to 1 Accelerator,” a 3-month program designed to help founders bootstrap their startups and secure funding from Nibiru's venture capitalists.

Hackathons & Events 🧑‍💻

TON introduces Open League Summer, a series of 3-day bootcamps coming to 13 locations worldwide with a prize pool of 2 million dollars.

Research 🧑‍🔬

potuz published “Sandwich attacks on ePBS”, analyzing how ePBS handles specific types of attacks better than the current system.
jonahb27 published “User-Defined Penalties: Ensuring Honest Preconf Behavior”, proposing an approach to ensure reliability and honesty in preconf transactions.
0xjonah1 shares a research paper “Large Language Models for Blockchain Security: A Systematic Literature Review”.
Stephane Gosselin and Ankit Chiplunkar published “Introducing OneBalance”, aiming to shift the crypto ecosystem from a chain-centric to an account-centric model and simplifying user experience.
cryptskii published “Optimizing ZK-Rollup Scalability, Security, and Censorship Resistance with Epidemic MPC, Efficient Data Structures, and Advanced Cryptographic Techniques”.
Euler Labs published “Dutch Liquidation Analysis”, examining possible attack methods that malicious actors could exploit within the liquidation mechanism of Euler v2.
Francesco, Luca, and Roberto published “DAS fork-choice”, exploring how the introduction of Data Availability Sampling (DAS) affects the fork-choice rule in blockchain consensus protocols.
Gauntlet introduces the LRT Market Risk Framework to evaluate the market risk landscape for each token.
L2BEAT introduces the Data Availability Risk Framework aimed at assessing the security profile of Data Availability (DA) solutions.
Sequence publicized their progress on ERC-5189. ERC-5189 is an alternative to ERC-4337, featuring zero on-chain costs.

Tooling 🛠

Ethereum

EigenLayer introduces Awesome AVS, a curated list of codebases, guides, and links for developers and teams looking to build AVSs.
Austin Griffith shares "Scaffold ETH 2 + MACI Voting Template", a starter kit for developers aiming to build decentralized voting applications that prioritize privacy and resist collusion.
Ape Framework, a smart contract development framework for Pythonistas, data scientists and security professionals, highlights the bug fixes and feature implementations between v.7.15 and v7.22.
thirdweb launches thirdweb Engine, an all-in-one web3 backend equipped with secure backend wallets, APIs to read/write to smart contracts, and infrastructure for account abstraction, gasless transactions, and authentication.
Alchemy introduces LightAccount v2. LightAccount is an ERC-4337 smart account with designated ownership. V2 is 14% cheaper to deploy than v1 and unlocks support for multiple owners.
micro-eth-signer 0.9.0 is out featuring the ability to fetch full account history and token balances using an archive node, and implementation of SSZ encoding. micro-eth-signer is a minimal library for Ethereum transactions, addresses, and smart contracts.
ethPandaOps launches the first Pectra developer test network (Pectra Devnet 0). There are 8 EIPs included in devnet-0, but the list is not finalized yet.

Solana

Metaplex launches its first Core External Plugin “Oracle Plugin” on devnet. The Oracle plugin can read from an external account to influence lifecycle events like create, transfer, update, and burn, enabling asynchronous control of assets.
Tinydancer announces its Simplified Payment Verification (SPV) client is live on Solana Testnet.
3.land introduces the open-source tool for minting compressed NFTs on Solana.

Cosmos

Rollchains introduces Spawn, a development platform for building custom modular Cosmos-SDK blockchains. Developers can use Spawn platform to launch Interchain Security (ICS) consumer chains and join the expanding Atom Economic Zone (AEZ).

Education/Mechanism 🧑‍🏫

HackQuest partners with Linea and MetaMask to launch Linea Learning Track, an online course containing knowledge of Linea and Solidity, and guided projects to build NFT Dutch auctions, Farcaster frames, and decentralized social DApps.
Dimitar Tsvetanov shares the Solidity Attack Vectors Checklist from @0xprinc, a compilation of solidity attack vectors.
Jeff Security shares “DeFi Design Takeaways from DeFi Risk Modeling” from yAcademy, summarizing economic implications for good designs from some of the best whitepapers.
Zaevlad introduces Foundry function prompt(), a Foundry feature that allows developers to test smart contracts in a more interactive and efficient way.
HackQuest partners with NTU Singapore to launch MOOC “Ideating and Building in Web3”, a free course aimed at guiding founders to develop innovative Web3 project ideas, and build basic Web3 applications.
Jason Chaskin published “Just Another Restaking Explainer”, a tutorial to introduce Restaking and LRTs.
Runtime Verification shares how to formally verify Optimism Pausability Mechanism through Kontrol.
Charles Wang explains the use cases of low-level call functions “staticcall” and “send”.
Dimitar Tsvetanov shares the Solidity Security Compendium from @theweb3hacker, a curated list of different Solidity vulnerabilities.
brimigs shares a video explaining how to use Anchor macros and build a CRUD dApp on Solana.

Infrastructure 🏗

L2s

Mint Blockchain, an L2 blockchain built with the OP Stack, launches Developer Mainnet. Developers can now deploy key infrastructure & applications on Mint mainnet.

L1s

Tucana, a modular network driven by Proof-of-Tradable-Value, launches Tucana Chain, spot DEX and perp DEX on Testnet.
Initia, a foundational Layer 1 blockchain integrated with a bespoke Layer 2 infrastructure, launches Incentivized Public Testnet.

Security 👾

Sonne Finance, a DeFi lending protocol, has experienced a $20 million exploit involving a known donation attack on Compound v2 forks.
Predy finance, a DEX for perpetual trading and token swaps, was attacked and lost approximately 83 WETH and 219,585 USDC.
ALEX, a Bitcoin-related DeFi project, was attacked and lost over $4.3 million in various tokens.
pump.fun, a Solana-based memecoin launchpad, was exploited for ~$1.9 million through a “bonding curve” attack.

Bug Bounties 🐞

Aviator, a decentralized token ecosystem, launched a bug bounty program on HackenProof with bounties of up to $15,000 USD.
Beefy, a decentralized multi-chain yield optimizer, is launching an audit contest on Sherlock with total rewards of 30,500 USDC.
Tokensoft, a platform to launch and distribute tokens, launched an audit contest on Sherlock with total rewards of 22,500 USDC.
Infinex, a secure cross-chain self-custodial wallet, launched a bug bounty program on ImmuneFi with bounties of up to $1,000,000 USDC.
Sophon, a modular blockchain powered by zkSync, launched an audit contest on Sherlock with total rewards of 22,500 USDC.
Metrom, a concentrated liquidity AMM tool, launched an audit competition on Hats finance with rewards up to 5.6k $DAI.

Product Launches 🚀

Former Lyra dev Anton built Monarch Lend, a simplified lending interface for Morpho’s MetaMorpho vaults. Users can use Monarch to filter loan or collateral assets, compare markets at a glance, and initiate a simple transaction to supply.
BounceBit, a Bitcoin restaking chain backed by BinanceLabs, launched its mainnet. Users can now stake BB/BBTC to earn staking rewards, earn yield via Funding Rate Arbitrage, and check their airdrop rewards if eligible.
Pear Protocol, an on-chain pairs trading protocol, launched public beta. Pear is built on top of perp dexes like GMX, Vertex, and SYMM, allowing users to trade over 210 pairs and earn up to 350000 ARB.
Limitless Finance, a liquidation-free perp DEX, launched its mainnet on Base. To reward early users, Limitless announced a “Use and Loot” campaign and will airdrop lootboxes to top users/LPs of Base protocols based on their usage and engagement. The campaign begins on May 13th and ends on June 21st.
CyberConnect, a social network, transitioned into a social L2 and rebranded to Cyber. Cyber is now live on the developer mainnet, and the team plans to distribute millions of $CYBER tokens to stimulate developments.
Genome, a domain system built for the Gnosis Chain, launched public registration of .gno domains.

Web3 Builder News is supported by ACI. If you are interesting in public goods funding or sponsoring a technical newsletter with good developer reach, please reach out to support@todayindefi.com