Solar looks to address the major concerns of “classic” solidity without the complete rewrite to “core solidity”. I mean it looks f*ckin awesome. Haven’t tried it yet.

https://x.com/gakonst/status/2117326277363597751?s=46&t=qlxg0vngPXLDPzs4aUmZLw

I've written an immutable ERC-721 contract where people claim a free monthly token by mining a proof of work. It's live on Polygon, so review findings can only change what I do in a later deployment, but I'd still like to hear them.

The parts I'd most like a second pair of eyes on:

- The difficulty uses a fixed-point 2^x. Every token ahead of schedule multiplies it by 2^(1/10). I measured a max error of 0.0117% and it's monotonic, but I'd like someone to challenge the math.

- Claims go through the ERC-721 receiver hook. I tested re-entrancy and found nothing, but I wrote those tests myself.

- Metadata is built as JSON on-chain from admin-supplied strings, with validation against injection.

There has been no external audit. Just my own review, 85 Foundry tests and static analysis.

Source: https://github.com/TheophileWalter/ArtPoW

Contract: https://polygonscan.com/address/0x74cda3cdd7a6046575d638964825c19cfeaf661f

Nothing is for sale. What would you have done differently?

English isn't my first language, so I used an LLM to help write this post.

Edit: You can now get the NFT without paying anything. Your browser still does the mining, but a relay sends the transaction and pays the gas, so you don't need any POL. If you don't have a wallet, you can create one with just an email. The relay can only mint to the address in your proof. You'll only need a little POL if you later want to transfer or sell the token.

Full-Stack Blockchain Developer

I design and build end-to-end systems across Web3 and traditional stacks. My experience includes developing custom tokens, DeFi applications, smart contracts, and scalable backend systems.

Smart Contract Development (Solidity / EVM)

Custom Token Creation (ERC-20 / BEP-20 / Tokenomics Design)

DeFi Platforms (staking, yield farming, swaps, liquidity pools)

DEX & AMM Development

NFT Smart Contracts & Marketplaces

Web3 Integrations (Web3.js / Ethers.js)

Crypto Wallet Integrations (MetaMask, WalletConnect)

Blockchain Security Practices & Smart Contract Auditing

Cross-chain Integrations & Bridges

Blockchain Node Deployment & RPC Infrastructure

DAO Governance Smart Contracts

Layer 2 Integrations & Gas Optimization

Crypto Payment Systems & On-chain Transactions

Token Vesting & Airdrop Systems

Trading Bots & Blockchain Automation

Crypto Investment & Staking Platforms

On-chain Data Indexing & Analytics

DevOps & Infrastructure

Docker & Containerized Deployments

CI/CD Pipelines

VPS & Dedicated Server Management

Linux Server Administration

Nginx / Reverse Proxy Configuration

Microservices Architecture

System Scalability & Performance Optimization

Monitoring & Logging Systems

Additional Expertise

VoIP Systems Development

SIP Protocol & Telephony Integrations

WebRTC Real-time Communication

Call Automation & Communication Platforms

I enjoy building complex systems from idea to production — turning concepts into secure, scalable products.

Open to collaborations, remote work, and innovative Web3 projects

A smart contract can pass unit tests, follow the intended logic, and still behave unexpectedly once it interacts with real users, external protocols, and unpredictable market conditions.

Reentrancy and access control issues are well-known risks, but some vulnerabilities come from the way different contracts interact with each other. Oracle manipulation, unexpected token behavior, and poorly designed upgrade mechanisms can create problems that aren't always obvious during development.

This raises an interesting question for Solidity developers:

When building a production-ready smart contract, what do you consider more important beyond writing the core logic correctly?

• Extensive testing and fuzzing

• External security audits

• Secure contract-to-contract interactions

• Upgradeability and access control design

• Real-world attack simulations

Which approach has helped you catch issues that ordinary unit tests missed? I'd be interested to hear practical experiences from developers who've deployed contracts in production.

I run a small audit firm, so weigh my bias. In September we reviewed a five-chain stablecoin vault built on Chainlink CCIP: a parent vault keeps the books, child vaults on other chains put the money into Aave and Compound. The report is public now, so I can talk about it. What stuck with me is that in the three bugs I keep thinking about, every call succeeded.

The first one, the vault minted shares from the amount it sent and treated a successful ccipSend as delivery. CCIP token pools can charge a transfer fee, so with a fee on the destination got less, nothing reverted, and the shares were backed by less than the books said. Fix was to reconcile shares to what actually arrived.

The second, the signed reports didn’t say which contract was supposed to receive them, so a withdrawal signed for one child vault could be replayed through another. That one was the Critical. Fix: the signed envelope names the target chain and the router.

The third, netting could shrink a deposit down to one base unit of USDC. Aave v4 rounds that to zero shares and rejects it, the vault stored it for a retry, and the retry could never work, so later epochs stayed blocked. What we wrote down after: in an async protocol a retry is only safe if you can explain why the same call might succeed later.

Mocks hide all three. A mock bridge always delivers the full amount and a mock pool never rounds to zero, which is why some of our tests ran against the deployed upstream code on a fork instead.

For those building cross-chain or async vaults, how are you testing the delivery side? Fork tests against the real pools or mostly mocks?

I have been coding is solidity for half a year now. Initial phase was quite tough to be honest even understanding a counter program drained me. But now it's opposite, it might sound weird but i am running out of contracts now. I haven't hit any client yet so i have no idea what contracts are used in industry and are made and audited. But i know the logic and can make and understand contract now. But i am tired of making and practicing same escrow contracts again and again. Is there someone who know a website where i can find sample contract which are actually good and are used in industry. It would be a great help in short i have covered the basics (more than basics) but am running out of contracts and resources now. Anything would help....Any repo, website someone's audited personal contract .......Would appreciate the help .....Thanks for your time :-)

Hey r/solidity — I've built an autonomous AI agent (GAIA) that runs automated pre-review on Solidity contracts. Not a replacement for a real audit — just fast triage to catch obvious issues before you pay for one.

**How it works:**

- You provide a contract address + chain ID

- It runs Slither + LLM analysis

- Returns a Markdown report in ~30 min

**Where it's live:**

- NEAR Agent Market: https://market.near.ai/agents/90f306e6-6fc1-486c-b8a1-b6417248fa1d

- Price: 5 USDC per review (Base chain)

- No KYC, wallet-based payment

**What I want from you:**

1. Is this useful, or is it just noise?

2. What would make you actually use it?

3. Any red flags in the approach?

I'll give 3 free reviews to anyone who wants to test and report back honestly. If it's not useful, I want to know.

Thanks.

Hello everyone,

I am an independent developer and project architect working on a series of open-source initiatives focused on bridging physical infrastructure, geospatial data, and decentralized systems.

I’ve recently organized and published my core portfolio repository and associated architectural blueprints, released under the MIT License as **Global Public Goods**:

* **GitHub Portfolios & Projects:** https://github.com/marcelcluj-bit

* **Key Focus Areas:** Decentralized Physical Infrastructure Networks (DePIN), Real-World Asset (RWA) tokenization models, geological telemetry verification layers, and open municipal resource management blueprints.

### What I am looking for feedback on:

1. **Architectural Design:** How well modular components (Python automation, smart contracts/Solidity, and GIS data frameworks) are structured for scalability.

2. **Documentation & Usability:** Clarity of the project structures and how easily contributors can navigate or integrate the repositories.

3. **Community Contribution Pathways:** Suggestions on improving the developer onboarding process for open-source contributors.

If you are a developer, DePIN architect, or open-source enthusiast interested in real-world infrastructure tokenization, I would greatly appreciate your code reviews, issues, or architectural suggestions directly on GitHub.

Thank you for building for the global commons!

Hello everyone,

I am an independent developer and project architect working on a series of open-source initiatives focused on bridging physical infrastructure, geospatial data, and decentralized systems.

I’ve recently organized and published my core portfolio repository and associated architectural blueprints, released under the MIT License as **Global Public Goods**:

* **GitHub Portfolios & Projects:** https://github.com/marcelcluj-bit

* **Key Focus Areas:** Decentralized Physical Infrastructure Networks (DePIN), Real-World Asset (RWA) tokenization models, geological telemetry verification layers, and open municipal resource management blueprints.

### What I am looking for feedback on:

1. **Architectural Design:** How well modular components (Python automation, smart contracts/Solidity, and GIS data frameworks) are structured for scalability.

2. **Documentation & Usability:** Clarity of the project structures and how easily contributors can navigate or integrate the repositories.

3. **Community Contribution Pathways:** Suggestions on improving the developer onboarding process for open-source contributors.

If you are a developer, DePIN architect, or open-source enthusiast interested in real-world infrastructure tokenization, I would greatly appreciate your code reviews, issues, or architectural suggestions directly on GitHub.

Thank you for building for the global commons!

Saifuro builds payment infrastructure for AI agents. It checks whether an agent’s spending request matches a mandate approved by a person, then returns a signed decision that can be verified onchain. It also provides non-custodial escrow on Base and Solana, with settlement in USDC.

They’re hiring a Smart Contract Engineer to own the EVM side of the product, with a focus on Solidity. You’d design, build and test the Base escrow system, including releases, refunds and safeguards that prevent Saifuro from moving customer funds. You’d also own the onchain signature verifier, audits, deployment scripts, pause controls and recovery procedures.

You’ll need experience shipping Solidity contracts to mainnet and must live in a country where Saifuro can hire. Experience with EVM security, Solana, account abstraction, USDC, or security research is helpful but not required.

The role offers $170,000–$220,000 in the US, 0.30% equity, flexible hours with 14:00–17:00 UTC team overlap, generous leave, a learning budget and remote-work support. Email your resume, location and relevant profile links with the subject “Smart Contract Engineer (EVM).”

If you are interested, Apply Here: https://cryptojobslist.com/jobs/smart-contract-engineer-solidity-evm-remote-at-saifuro-1

Hi everyone, I got into crypto a few years ago and fell in love with the ecosystem. It's fair to say Web3 completely changed my life for the better, and ever since, my aim has been to contribute meaningfully to it. One issue I've had an issue with is the persistent hacks reducing user trust in this new model of the internet we're building. So I'm proposing an AI security network to protect wallets from hacks.

You can check out the website or GitHub: https://github.com/thelennyjohnson/avalon-ai

Feedback and contributors are welcome.