Bloqarl | Zealynx(@TheBlockChainer):I treat every external callback as a transaction that may never arrive successfully. My review question is not only “what happens when the callback succeeds?” It is: • What state was committed before it? • What can make it revert? • Who can recover, after what delay? • Can recovery race with a late callback? Async security lives in the transitions between transactions, not only inside each function.

Bloqarl | Zealynx

@TheBlockChainer

Founder of @ZealynxSecurity. 10 years QA → 4+ years Smart Contract Security. Building an audit firm in public. Building for Web3 builders

加入 June 2022

1.1K 正在關注 5.4K 粉絲

Bloqarl | Zealynx@TheBlockChainer

2026.08.18 16:07

I treat every external callback as a transaction that may never arrive successfully. My review question is not only “what happens when the callback succeeds?” It is: • What state was committed before it? • What can make it revert? • Who can recover, after what delay? • Can recovery race with a late callback? Async security lives in the transitions between transactions, not only inside each function.