Curriculum·Graduate·G206
Running a Security Review for a Small Team
Radiant Capital, 16 October 2024, about 50 million dollars by Radiant's own count. At least three long-standing contributors, on hardware wallets and in different places, each approved what their Gnosis Safe front-end showed as a routine transaction.
Start with lesson 14 lessons · about 2.1 hours · free account to read in full
Lesson 1 opens on
Radiant Capital, 16 October 2024
Radiant Capital is a cross-chain lending protocol run by a small distributed team. On 16 October 2024 about 50 million dollars was taken, by Radiant's own count. At least three long-standing, trusted contributors, geographically distributed, each signing on a hardware wallet, approved what their Gnosis Safe front-end displayed as a routine transaction.
The lessons
- G206-01The review a small team can actually runDistinguish a small team's realistic security review from a formal audit, and state what each can and cannot doabout 31 min · opens on Radiant Capital, 16 October 2024
- G206-02Blind signing, and verifying the payloadDefine blind signing: authorizing a transaction whose real effect the signer cannot read or verifyabout 31 min · opens on Bybit, 21 February 2025
- G206-03The public function that should have been caughtExplain why every state-changing function needs a deliberate answer to who is allowed to call itabout 30 min · opens on Parity multisig wallet, 19 July 2017
- G206-04Who holds the keysState the question that sits beneath every technical control: who ultimately holds the keys and can they be held to accountabout 32 min · opens on AnubisDAO, 29 October 2021