Breaking Down First Major Release - Proving the Safe Vulnerability

Remember when I mentioned a few months ago that all the Safe contract versions deployed on the Ethereum blockchain contained an exploitable vulnerability that would allow a sufficiently resourced threat actor to exploit and compromise?

I shelled that out a little more. This was a difficult vulnerability to prove because creating a PoC (straightforward enough) to establish exploitability required resources well outside of what I possess.

For several weeks, I mulled over how to get around this. At first, I figured I would just prove this mathematically. The issue with that approach is that this deals with cryptography alongside complex concepts that were either going over heads or obfuscating the bigger picture too much.

But then I had my eureka moment. This entire process honestly elevated my understanding of smart contracts, EVM & the blockchain, in general, by an astronomical amount (I mean that in the humblest way possible).

(Several more messages to follow this)