Bloqarl | Zealynx(@TheBlockChainer):I treat every external callback as a transaction that may never arrive successfully. My review question is not only “what happens when the callback succeeds?” It is: • What state was committed before it? • What can make it revert? • Who can recover, after what delay? • Can recovery race with a late callback? Async security lives in the transitions between transactions, not only inside each function.

Bloqarl | Zealynx

@TheBlockChainer

Founder of @ZealynxSecurity. 10 years QA → 4+ years Smart Contract Security. Building an audit firm in public. Building for Web3 builders

Joined June 2022

1.1K Following 5.4K Followers

Bloqarl | Zealynx@TheBlockChainer

2026.08.18 16:07

I treat every external callback as a transaction that may never arrive successfully. My review question is not only “what happens when the callback succeeds?” It is: • What state was committed before it? • What can make it revert? • Who can recover, after what delay? • Can recovery race with a late callback? Async security lives in the transitions between transactions, not only inside each function.