Venus Core Pool audit finds critical reentrancy and access control vulnerabilities

·4 views

A security audit of the Venus Core Pool DeFi protocol was conducted from October 1-7, 2024, by XYZ Audits. The review focused on reentrancy safety and access controls across core contracts underpinning the $1.3 billion protocol. It identified critical vulnerabilities, including reentrancy loops allowing fund theft and privilege escalation flaws in admin functions. The audit assigned the protocol a high-risk score of 7 out of 10 due to these issues.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

AI models tested on financial reasoning with minor fact changes

A researcher created a benchmark called 'Cents Matter' to test AI models' precision in financial reasoning. The benchmark contains 40 synthetic cases in Brazilian Portuguese that form 20 pairs where only one material fact changes between each pair. Three AI models from different families were tested on October 7, 2026, under controlled conditions with no execution errors. The benchmark evaluates exact monetary reasoning under explicit rules rather than regulatory knowledge. Cases test numeric locale handling, rounding methods, event identity recognition, and evidence sufficiency assessment.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Frostwise App Uses Open-Source AI to Predict Local Frost Dates for Gardeners

A developer has created Frostwise, a web application that generates hyperlocal frost date predictions for gardeners. The tool uses 20 years of historical climate data from the Open-Meteo archive and the open-source TabPFN AI model to analyze locations worldwide. It calculates the last spring and first autumn frost dates, or identifies frost-free climates, based solely on the data. Using these predictions, the app then generates a personalized planting calendar for common crops. The project is fully open-source, with a live demo available online.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Pylerium open-source tool creates Call of Duty-style IDE and asset management interface

Pylerium, an open-source project on GitHub, provides a graphical interface and workspace inspired by Call of Duty menus for managing development assets. The tool allows users to import and preview 3D models and images, creating loadout cards and inspection panels. It operates as a Python application requiring version 3.10 or higher, with optional AI assistance and GPU-accelerated rendering. The system includes a separate orchestration workspace for running tests and managing project workflows. All example assets are original creations, and the project does not include any proprietary game content.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Mindscend fine-tunes compact AI model on MacBook to improve chatbot, halves prompt length

Mindscend engineers fine-tuned the Qwen2.5-1.5B-Instruct model using LoRA on a MacBook to improve their company's chatbot. The model had been parroting identical responses to different user queries due to its small size and long system prompts. The team initially implemented prompt engineering and a secondary classifier to filter off-topic requests, but this approach was slow and brittle. They then created a training dataset using a larger teacher model to teach desired behaviors, such as concise responses and refusal of off-topic questions. The fine-tuned model now runs on a CPU-only AWS server with a significantly shorter, facts-only system prompt.

0 comments Read more at DEV Community