Amlan Roy

In lending protocols, collateral is supposed to protect liquidity suppliers. A user supplies collateral, borrows against it, and if their position becomes unhealthy, liquidators repay the debt and receive the collateral. In the normal case, this keeps the system solvent: borrowers get liquidity, suppliers earn yield, and liquidators are rewarded for cleaning up risky positions. But there is an uncomfortable edge case every lending protocol has to handle: What if the collateral is no longer enough to cove...

What looked like a simple gas failure turned into an investigation involving EIP-7702 delegation, cryptographic signature recovery, an active attacker racing transactions, and finally an atomic fund rescue. A few days ago, I ran into one of the strangest blockchain incidents I have dealt with. The system I was working on uses an executor wallet to perform on-chain operations. After an operation completes, the executor is reimbursed for the gas it spent. Everything appeared normal. Settlement completed su...

If you’ve spent any time in Solidity, you’ve deployed a contract a hundred times without thinking about how the EVM decides where it lives. You write new MyContract(), Foundry or Hardhat does its thing, and an address pops out. Move along. But once you start reading other people’s bytecode — or debugging why a factory contract isn’t deploying where you expect, or trying to understand why Uniswap V3 pools always land at the address its periphery contracts predicted — you realize there isn’t one way contra...