Wormhole eth-sol hack was 120k weWETH ($320m). Minted the wrapped eth on solana by passing a fake system address, which was falsely approved by the guardian signature check. Then swapped back to eth.
This whole chain of verification and process is managed by a large handful of smart contracts. One SC told another that the guardians had approved. How are these APIs not bulletproof.
Looked a bit through core contracts and deepdived wrapped tokens.
Solana Pay released (from same guy who worked Google Pay). https://solana.com/news/solana-pay-announcement. Js sdk for dapps, merchant in-person, more. https://github.com/solana-labs/solana-pay.
Finally wrapped nvm and switched node 10 to 17.4.0 (lts is 16.13.2). Npm 8.4.0.
Remember global pkgs in ~/.nvm/versions/node/v<>/lib/. Local in cwd.
Solc-js (and solidity vscode extension) and web3.js.
/usr/local, user or root? Stricter the better.
Played with truffle and ganache. And Remix https://remix.ethereum.org. And metamask.
Went through full process of setting up private network with Geth: https://geth.ethereum.org/docs/interface/private-network. Did both ethash (PoW) and clique (proof of authority).
All eth networks: https://chainlist.org/.
Deployed a few smart contracts on my local net (started from custom genesis block), as well as the public goerli testnet.
Faucet https://fauceth.komputing.org/?chain=5.
Managed accounts with Clef, compared to Geth’s native keystore.
Interacted with my contracts via both IPC and RPC, played around with auth.