OpenZeppelin Profile picture
Sep 19 6 tweets 2 min read Twitter logo Read on Twitter
OpenZeppelin Contracts 5.0 Release Candidate is now available for public testing 🧪

5.0 includes an all new AccessManager module for improved security and transparency, plus efficiency improvements and simplifications.

Bug bounty rewards increase by 50% during the RC phase.
Redefined Access Control 🔐

AccessManager is a new and comprehensive solution for role management across contracts. Instead of having to manage them separately, AccessManager allows you to manage permissions from a central contract, also making your system easier to audit. Image
AccessManager built-ins

⏰ Permissions can be time locked by default — no need for separate contracts.

🔄 Governor DAOs can interact with contracts using AccessManager through GovernorTimelockAccess.

⚡️ Existing contracts can migrate to AccessManager without upgrades.
With Contracts 5.0, we are able to include a few breaking changes to modernize the codebase, follow best practices like namespaced storage, and further improve gas efficiency without compromising security.

@Amxx shared more details at EthCC in July:
Bug Hunters 🐛🕵🏻‍♂️

All @immunefi bug bounties will be boosted by 50% during the RC phase.

Contracts 5.0 has been audited by OpenZeppelin Security Research. Test your skills and see if you can find novel attack vectors! immunefi.com/bounty/openzep…
Thank you to all our contributors for helping lead the way in secure web3 development!

github.com/openZeppelin/o…

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with OpenZeppelin

OpenZeppelin Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @OpenZeppelin

Aug 29
Announcing Defender 2.0, a mission-critical developer security platform to code, audit, deploy, monitor, and operate blockchain applications

Built for security and speed across all stages of the development lifecycle

Dive in and join the waitlist

openzeppelin.com/defender2-wait…
Image
SECURITY ON EVERY PULL REQUEST

Automatic code analysis for vulnerabilities, differences, improvements, gas costs, and test runs integrated directly into your development workflow

Powered by machine learning intelligence, cutting-edge tools, and a native GitHub app integration
Image
Image
STREAMLINED WORKFLOW FOR AUDITS

Forget about spreadsheets, Slack messages, and PDFs!

Easily track issues and resolutions, interact directly with auditors, and streamline the process for higher quality and faster results
Image
Image
Read 12 tweets
Oct 20, 2022
Did you know that you can use a collection of Forta detection bots to automatically analyze, inspect, and detect bugs on newly deployed Contracts?

Thread below👇
The Contract Bots Gang is a collection of @FortaNetwork bots separated into three layers developed by our Security Research Experts at OpenZeppelin:
⚙️ Deconstruction layer
💡 Detection layer
🐞 Bug hunting layer
⚙️: The Deconstruction layer right now is composed of a single Forta bot that inspects each transaction in the blockchain and reacts whenever the transaction contains a new smart contract deployment.
Read 13 tweets
Apr 18, 2022
Introducing Contracts Wizard for Cairo! An interactive generator to bootstrap your smart contracts and learn about OpenZeppelin Contracts for Cairo.
A thread ​​👇
What is Cairo: Contracts Wizard for Cairo is an interface to interactively build a smart contract out of components from OpenZeppelin Contracts for Cairo. Cairo is the native smart contract language for StarkNet, a decentralized ZK Rollup.
How to use: Select the kind of contract that you want, set your parameters and desired features (token name, symbol, premint amount, etc.), and Contracts Wizard for Cairo will generate all of the code necessary.
Read 5 tweets
Jun 19, 2018
2 years ago, the DAO was hacked and we learned the importance of security in smart contract development the hard way. We created #OpenZeppelin to fill this gap
As of today, #OpenZeppelin libraries were downloaded 100,000+ times, leveraging a community of 4500+ developers. Still, smart contract development remains a difficult and inefficient endeavor, analogous to the early days of computing
We are now making @zeppelin_os the canonical smart contract development platform — improving the experience of developing, deploying* and managing** decentralized applications
Read 4 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us on Twitter!

:(