from is the address the excludedFromFees address will steal from, it would make sense for the scammer to use it on the pair address though a smart contract exludedFromfees, which first calls that function to get the approval from the pair, then transfers from the pair to himself and then swaps to get all the eth, all in a single tx

Apr 29, 2023, 7:04 PM

do you maybe work for certik?

Apr 29, 2023, 7:13 PM

nah a noob here, that's why I'd appreciate if you make me understand this

Apr 29, 2023, 7:13 PM

that's why I asked if you worked for certik :')

here is the explanation of the exploit

Apr 29, 2023, 7:14 PM

that's what I said , how does the from address get looted? it's from the _allowances mapping that it is deducting not the _balances map

and liquidity drain and what not

you know this and yet you're arguing

the moral implications

yes don't spam

it's the same topic from yesterday

everything is a ponzi scam

even banks

Apr 29, 2023, 7:22 PM

It would be nice to have some meaningful conversations between developers once in a while, instead the recurrent theme is always "investor that decides to fork stuff to scam users and has no technical knowledge whatsoever"

Apr 29, 2023, 7:22 PM

That’s not true. Marketing is at the base of every business, but the Ponzi comes where is promised a profit (securities) in an environment where nothing is regulated

Apr 29, 2023, 7:26 PM

definitely, but it's ultimately always one thing , few controls the majority

Apr 29, 2023, 7:27 PM

Always have been since the dinosaurs era

Apr 29, 2023, 7:27 PM

yes so nothing out of the norm for tokens to have taxes

Apr 29, 2023, 7:28 PM

It’s out of standards, so it’s out of norm

Apr 29, 2023, 7:29 PM

who sets those standards?

Apr 29, 2023, 7:29 PM

guys do whatever you want but just stop this

EIP

Apr 29, 2023, 7:29 PM

EIP

Apr 29, 2023, 7:29 PM

for the scammer, scamming is the standard, for you the opposite is true

oh that 😂

yes it's the same taxes taxes from yesterday

Apr 29, 2023, 7:30 PM

Guys just do the fuck you want but stop flooding the chat with bs

Apr 29, 2023, 7:33 PM

miss*

anyways Gn

and my 10 mins of spam annoyed you 😂

Apr 29, 2023, 7:35 PM

and you test on mainnet... gg very smart

Apr 29, 2023, 7:56 PM

is there any functional dex available on polygon mumbai?

Apr 29, 2023, 7:58 PM

smart like you

hello

Apr 29, 2023, 8:15 PM

sending to an address that has never issued a tx is likely to cause those funds to be lost for ever

if you send to a bunch of random address(uint160(randomNumber)) it's very hard someone will actually receive those tokens

there's 2**160 possible addresses and the number of active wallets is around 230M on ethereum

and 230M is about 2**28

Apr 29, 2023, 9:05 PM

230M active addresses its not even 0.0001% of possible addresses

Apr 29, 2023, 9:29 PM

It's about 1.573e-40

Apr 29, 2023, 9:32 PM

thats how strongly protected crypto its amazing

What you will use for RNG?

Apr 29, 2023, 9:36 PM

UI are mostly not open source

Apr 29, 2023, 9:42 PM

Anyone know how mempool ordered transactions , I see its not ordered by nonce if same gas price

Apr 29, 2023, 10:09 PM

Nonce is a property of an address, it wouldn't make sense to take that into account

Miners however can choose whatever order they want, their aim is usually the maximum profit from tx fees (assuming miners behaving well and not mixed with mev)

I think if you perform a tx with has price 0 and a transfer of eth to the block.coinbase that would be mined and with a good priority (ofc depending on how much you send him)

But that's just to prove the order might differ by just "order by gas price"

Did you check the code? Explorers only show what they see emitted as events

Apr 29, 2023, 11:44 PM

token contract is fine, it's the usual defi token with custom swap
but this is no sense
the mev bot didn't had that balance at all

seems like, he sent tokens directly to the pool, synced and swapped 3m instead of 400k on explorers

Apr 29, 2023, 11:57 PM

look at the block https://etherscan.io/txs?block=17153568&p=4

both txs are in the same block, the first is the 8th on the block, the latter the 30th

Apr 30, 2023, 12:00 AM

at this point, i think it's just a missdirection.
Maybe he just unwrapped 11ETH, but those were from his own balance

and the explorers are reporting a wrong number

Apr 30, 2023, 12:01 AM

there's indeed some transfers to the pair in the middle

Apr 30, 2023, 12:01 AM

this is the transfer inside the token contract but it's 429991

Apr 30, 2023, 12:02 AM

there's a swap for 11 eth

look at the balance of the pool

see that in the middle of the two txs some eoas sent the same token to the pool

Apr 30, 2023, 12:03 AM

yeah

Apr 30, 2023, 12:03 AM

at that point you can just swap directly from the pair address

that's what happened in this case

Apr 30, 2023, 12:04 AM

so you mean someone manually sent the tokens to the pool, and he did the swap to profit from those? (with sync)

Apr 30, 2023, 12:05 AM

sync is automatically done by pair.swap

look at the txs on the block

Apr 30, 2023, 12:06 AM

exactly, and look at the recipient

Apr 30, 2023, 12:06 AM

so he bought with all of those, sent the tokens directly to the pool, then with the swap he got those "back" on a single sell? :o

Apr 30, 2023, 12:07 AM

yeah

Apr 30, 2023, 12:08 AM

ohhhh ok now it's more clear

Apr 30, 2023, 12:08 AM

idk why he chose to act this way though, he didn't even put the txs in a bundle, he risked getting rekt in the dark forest

Ig that was to avoid some token specific stuff I'm too tired to read

Apr 30, 2023, 12:09 AM

yeah that was i was thinking, he used a private network but still could be eaten out

i should start studiying mev, seems a fucking PvP game

Apr 30, 2023, 12:11 AM

the explorer would have mentioned that

Apr 30, 2023, 12:12 AM

where do you see that?

nvm found it

Apr 30, 2023, 12:14 AM

https://eigenphi.io/mev/ethereum/tx/0x382e0248aaca0f440e6417dd9aeefc283c1af6ac0f3b4a13977a11b3fb842083

Apr 30, 2023, 12:19 AM

btw I see the token was made by someone in this group lol

Apr 30, 2023, 12:20 AM

that website is too wonderful btw :o

Apr 30, 2023, 12:28 AM

https://eips.ethereum.org/EIPS/eip-3607

Apr 30, 2023, 6:47 AM

are there any good free onchain oracles?

Apr 30, 2023, 6:58 AM

complex oracles can't be free and decentralized

Apr 30, 2023, 9:37 AM

Bro, the basics

Don't trust anything, verify and if you don't know what you're doing, probably you don't have to continue

Apr 30, 2023, 10:32 AM

Is it?

Apr 30, 2023, 10:32 AM

Indeed it is

Apr 30, 2023, 10:32 AM

I'm feeling you guys are not understanding my rhetoric here

Apr 30, 2023, 10:32 AM

Never heard of meta transaction? Eip712?

You're in a solidity group, at least one should be familiar

Apr 30, 2023, 10:33 AM

No, I haven't 😑
Guess I've got some good readings to do

Apr 30, 2023, 10:33 AM

Search for those in that chat or google

Apr 30, 2023, 10:33 AM

I've heard of meta txns but never took any interest in knowing what's it about

Apr 30, 2023, 10:33 AM

Also signing in general is what you do each time you send a tx to RPC

So always be careful with non-known website asking for signatures

Metamask give you enough info, from PC

Don't know on mobile

Apr 30, 2023, 10:35 AM

😅😅😅

Apr 30, 2023, 10:36 AM

What's the difference between this and tx.origin!=msg.sender?

Ah ok I think I got it, he mentions a collision where he is able to get the private key of a smart contract

It would cost billions to achieve that though

Apr 30, 2023, 11:16 AM

but are there any? that's also easier when it comes to integration

Apr 30, 2023, 2:04 PM

but expensive, if decentralization doesn't matter
Then make your own oracle

Apr 30, 2023, 2:59 PM

I don’t really think decentralization is a need. Also if we want to have the acceptance of public sectors they won’t like that.

Are there any APIs to make my own oracle?

Apr 30, 2023, 3:02 PM

Chainlink is open sourced fyi

Apr 30, 2023, 3:05 PM

I’ll take all this input and look more information about this.
As you sow I’m new in to oracles and interactions with SC.

Apr 30, 2023, 3:08 PM