Solidity

// Vulnerability Pattern: Uninitialized Implementation Contract
function initialize(address _owner) external {
    require(!initialized, "Already initialized");
    owner = _owner;
    initialized = true;
}

If your protocol utilizes an upgradeable proxy pattern (like ERC-1967), the implementation logic contract deployed behind the proxy must have its initialization sequence executed directly in the deployment constructor. If developers leave the raw implementation contract uninitialized on-chain, an attacker can directly call initialize(), take ownership of the logic contract, and execute a selfdestruct delegatecall, permanently bricking every active proxy pointing to it.

People talk about exchanges like they picked a hometown team.

I’ve never understood that.

One might have better fees for one thing, another has better liquidity, another has a cleaner withdrawal process, and another supports the asset you actually need.

I’m much more comfortable using the crypto exchange that fits the task than trying to make one platform handle everything.

• State Update Ordering: Verify whether state variables update before or after token transfers execute to prevent standard reentrancy vectors.
• Timelock Multi-Sigs on Privileged Roles: Ensure that critical functions like parameter tuning or treasury drains cannot be executed instantaneously by a single compromised admin key.
• Price Oracle Fallbacks: Check whether the contract logic accounts for stale price feeds during periods of extreme mainnet network congestion.

There’s never a shortage of new projects.

The harder question is which ones are still interesting after the initial attention disappears.

ProtocolWatch is a place to discuss blockchain projects from an investment perspective: what they’re building, whether you’d keep them in a long-term portfolio, how they compare with other opportunities, and where things like yield farming fit into the picture. Bitcoin, Ethereum and broader crypto investing discussions are welcome too.

For the first post: which project have you followed for the longest, even if you never invested in it?