·275 words·2 mins
Abusing Python’s floating point arithmetic to forge JWT-like tokens — when float(‘inf’) meets type juggling.
·242 words·2 mins
Re-entrancy attack on a Solidity smart contract — bypassing extcodesize checks and draining tokens from a fake ad service.