Gemini Gas Optimization Audit Finds Savings Potential and Gas-Related DoS Risks

·3 views

An audit of Gemini's on-chain contracts, which hold roughly $5.34 billion in total value locked across Ethereum and Layer 2 networks, examined gas efficiency and gas-related attack vectors. Reviewers used static analysis, mainnet-fork profiling, and L2 testing on Arbitrum and Optimism to identify inefficiencies. Key issues included storage-slot fragmentation, quadratic gas growth in batch settlement, and external calls without gas caps that could enable griefing on congested L2 networks. The auditors estimated optimizations could cut gas costs by about 12 to 22 percent per operation, potentially saving around $3.2 million annually. The overall risk score was rated 4 out of 10, with recommended upgrades targeted within four to six weeks.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Connecting your own Supabase project to Lovable apps: setup and key caveats

Lovable apps get Lovable Cloud by default, which runs on Supabase, but this guide focuses on connecting a Supabase project you own, which is typically preferred for apps with real users. Setup happens in two steps: a workspace owner or admin first links a Supabase organization, then an editor connects a Lovable project to one of its Supabase projects. A common snag is that editors cannot add an organization themselves, so the owner or an admin must complete that step first. Switching between Cloud and your own Supabase later is not one-click and requires manual migration work, so it is best decided at the start. Once connected, schema changes are saved as migration files in the repository, while data changes and secrets stay under your control in the Supabase dashboard, and the author stresses manually verifying row-level security policies before launch.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Browser-Based Image-to-Bead Pattern Generator Uses CIE Lab Color Matching

A developer team built BeadPattern, a tool that converts photos into fuse bead patterns entirely within the user's browser, so images never reach a server. Matching colors in standard RGB produced muddy results for pastels and skin tones, so the team converted pixels and bead palettes into CIE L*a*b* space and used CIE76 distance instead. To keep slider adjustments responsive, they precomputed palette vectors and indexed them in a K-d tree for faster nearest-neighbor lookups. They also applied Floyd-Steinberg error diffusion to reduce color banding in gradients when mapping to a limited palette.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Netflix Q3 2026 earnings prep: guidance history, events and deck via MCP server

A developer who builds the Equibles stock market data MCP server shows how an AI agent can assemble investor relations material for Netflix's Q3 2026 earnings interview, scheduled for 20 October at 20:45 UTC. The tool lists the company's investor events, including the earnings call, the June annual meeting and a March conference appearance, with transcripts and slides where available. Tracking Netflix's full-year 2026 guidance across three releases shows the revenue range narrowing in July, the operating margin target unchanged at 31.5%, and the free cash flow target raised by $1.5B in April. The author also describes how a CFO's March conference remarks can be checked against the January plan, and notes the tool flags releases that have not yet been fully processed.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Payment platforms that can pay developers in USD outside the US: a comparison

A developer compared 50 payment platforms to find which ones will onboard and pay out USD to people in countries Stripe does not support. The author argues that eligibility by country, entity type and product type should be checked before comparing fees. Merchant of Record platforms are highlighted because they handle sales tax, fraud, chargebacks and refunds, which can remove the need for a local entity. The piece lists fee structures for several platforms, including Polar, Creem, Dodo Payments, Payhip and FastSpring, and notes that Lemon Squeezy is now owned by Stripe. It also explains that receiving the money in a local bank requires a second step, with Payoneer described as a common option, and that fees and terms should be confirmed on each provider's own pricing page.

0 comments Read more at DEV Community