hazenotes
practical write-ups from building contracts, dapps and hyperliquid tools: what breaks, what to check, and how the tools on this site work under the hood. rss
- Oct 16, 2026 · 3 min readThe ERC-4626 inflation attack, and how to make your vault immuneHow a first depositor can steal the next deposit in an empty ERC-4626 vault by donating tokens, a Foundry test that shows it, and the fixes: virtual shares, seeding, internal accounting and slippage checks.defierc-4626securitysolidity
- Oct 16, 2026 · 4 min readThe smart contract pre-launch checklistWhat to check before a Solidity contract goes to mainnet: access control, reentrancy, rounding, oracles, signatures, token edge cases, tests, gas and deploy setup. A practical list you can run today.securitysolidityfoundrylaunch
- Oct 16, 2026 · 3 min readToken approvals, explained: approve, permit, Permit2 and how to revokeWhat an ERC-20 approval, an NFT setApprovalForAll, an EIP-2612 permit and a Permit2 signature actually allow, why old approvals are a risk, and how to check and revoke them.walletssecurityerc-20nft
- Oct 16, 2026 · 3 min readDeploying to HyperEVM: big blocks, small blocks and talking to HyperCoreWhy a normal Foundry deploy fails on HyperEVM, how big blocks (30M gas) and small blocks (2M gas) work, how to switch, and how contracts read HyperCore and send actions through CoreWriter.hyperliquidhyperevmfoundrydeploy