More resources about the Gemini dollar: Whitepaper: https://gemini.com/dollar/whitepaper … Gemini blog: https://medium.com/gemini/blog-post-draft-501882fb35a7 … Press release:https://www.businesswire.com/news/home/20180910005233/en/Gemini-Puts-U.S.-Dollars-Blockchain-Gemini-Dollar …
-
-
Show this thread
-
Gemini studied known Ethereum risks, minimized complexity in their design, and developed a high-coverage symbolic test suite w/ Manticore all PRIOR to starting their review with us. We collaborated to mitigate more subtle risks during the review because they had prepared so well.
Show this thread -
Further, our upcoming advice on smart contract upgrades is based in part on discussions we had with Gemini earlier this summer. We’ll be publishing those recommendations later this month but, for now, here are pitfalls to avoid:https://blog.trailofbits.com/2018/09/05/contract-upgrade-anti-patterns/ …
Show this thread -
We were pleased to work w/ Gemini on this project. We hope that more teams follow their example! Study the risks: https://github.com/trailofbits/not-so-smart-contracts … Bug check the code: https://github.com/trailofbits/slither … Write property tests: https://github.com/trailofbits/echidna … Verify the final product:https://github.com/trailofbits/manticore …
Show this thread -
Even the most prepared, reviewed, and tested code can have bugs. If you find any in the
@GeminiDotCom dollar or related systems, contact them via their security page: https://gemini.com/security/ (we wish more people copied them here, too!)https://github.com/trailofbits/blockchain-security-contacts …Show this thread
End of conversation
New conversation -
-
-
Is the complete report showing the issues you discovered available?
-
Nope! All the pertinent details are in the public doc. We’re extracting some lessons learned into guidance for our blog.
-
Ok! So this one-pager is it? https://gemini.com/wp-content/themes/gemini/assets/img/dollar/gemini-dollar-trailofbits-audit.pdf …
-
Yep! It’s got engagement length, # of consultants, exact dates, engagement goals, level of access, testing techniques, bugs found, and retest status.
-
Ultimately it is the client’s decision what to release if anything at all, not mine. However, I think this high-level report communicates the most important information I’d want to know as a user.
End of conversation
New conversation -
-
-
Did your review include network congestion handling? Might all be for naught if nobody can sync a node.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
YouTube should have adviseren Them to use the Syscoin blockchain, Gasteren, cheaper to use, API's that are very good and easy to use. More info: http://syscoin.network/syslinks
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.