ICO for ERC20 based token - blockchain

Having developped the ERC20 based token I faced with the bunch of the questions related to ICO and google did not really help, so I was wondering if you guys could answer to the following questions:
Can I run ICO without having much money?
What are actually the steps to pass ICO?
Having a parallel of USDT on ERC20/TRC20 - there is no real evidence that these guys have available USD to cover emited USDT, does it mean I can create some yet another USD-stable coin and announce that it's fully covered by the company (which I could register the same day)?

Related

QR code format standard for blockchain transactions

I'm trying to create a QR code generator that would generate transaction data for some of the common blockchains and wallets.
There is some confusion about the format for different blockchains, but at least for main blockchains - it seems to be defined as:
ethereum:0xb794f5ea0ba39494ce839613fffba74279579268?amount=1.123
for ETH (or BTC) and
ethereum:0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48/transfer?address=0xb794f5ea0ba39494ce839613fffba74279579268&uint256=111.123e6
for EVM-compatible coins (like USDC here).
source: https://eips.ethereum.org/EIPS/eip-681
however... BNB doesn't seem to follow that format. I tried the following:
binance:0xba5830175b16e5e48d94c6fa11041ff9ed3bae5a?amount=1.123
bnb:0xba5830175b16e5e48d94c6fa11041ff9ed3bae5a?amount=1.123
binance:0xba5830175b16e5e48d94c6fa11041ff9ed3bae5a?amount=1.123&memo=1234
and:
both Binance and Exodus apps don't understand any of the above (not even eth or btc) - I'd appreciate links to their qr code requirements specs
Trust Wallet doesn't accept a BNB address written like that (funnily enough - amount and memo work flawlessly - same here, docs links would be amazing
metamask (which is Binance smart chain compatible) doesn't understand any of the BNB options - same here
I have honestly spent hours researching this topic and I am simply astonished by the lack of documentation in that regard.
as a bonus, just for the sake of informing others - XRP has its own super complex QR code format and it's available as a package here: https://www.npmjs.com/package/ripple-address-codec
anyway. any help will be greatly appreciated!
cheers

Anchor smart contract where two parties pays the contract and one of them get's the amount

i'm new to solana development and working on a personal project using the anchor framework.
I fould some resources like solana escrow example and some youtube videos on solana PDA but not able to understand it completely. What i want to achive is:
Let's sat there are two players A & B, both pay same amount (ex: 0.01 SOL) to the contract, based on a condition or i invoke a function (not sure how it's done) one of the player is paid the amount (winner).
How can i achive this using the solana (Anchor), i would really appreciate some resource.
Thanks 🙂
Couple things going on here -
Think of a PDA, 'Program Derived Address', as an account address derived from the address of your program and whatever you salt it with, instead of a random address. This is useful for storing some data that you'd like to be able to grab later without having to remember the address, and rather just needing to remember what you salt this with. In your case, you'd likely want to create an account with a PDA salted with some kind of GameID or player (for instance, player A creates a game, and you generate a PDA with your program address and player A's pubkey).
PaulX's Escrow Program is a excellent resource, however he is not using Anchor framework and is instead implementing it natively, which sounds out of scope for what you're working on.
I think my dutch token auction program may be of some use for you, as far as PDA's go. Additionally, check out the Solana Cookbook, or more specifically the section on sending SOL, which is a method within the SystemProgram.
Solana/Anchor is awesome, but it's difficult without scouring the docs. The Solana Cookbook and the Anchor Discord Server are your friends!

Which function in a ”honeypot” contract prevents buyers from selling their tokens?

A common scam in the world of Binance Smart Chain tokens is to launch a new token/contract that to the average person looks enticing, but when buyers purchase the tokens, they soon find that they are unable to sell them, and thus have lost their money.
I have heard it said that the developers of the token accomplish this by “blacklisting” all other wallets except their own from selling, but I am not sure how accurate (or how literal vs euphemistic) that explanation is.
Some people try to avoid this type of scam by making a test purchase/sale of a negligible amount to make sure the tokens is able to be sold.
My question is: are there particular functions/settings in the contract that could be scanned for and checked to identify whether or not a coin is this type of scam, instead of having to make a test purchase to find out?
Yes,
if owner set swapandliquify to false all the swaps could be locked. some people reported that scammers are using uniswapv2pair same way.
compiler version 0.5.17 has a lot of exploits/bugs too.
we at cointutu have an everyday challenge fighting against BSC scams.

Anti-hacking a game - best practices, suggestions

I recently made a simple game where user can submit his/her high scores online.
It is very easy to hack the game by increasing high score by using software such as Cheat Engine. High score is stored in an integer. Should I store encrypted high score instead of an integer and decrypt it to show in the game?
I was wondering what are the best practices since I'm new in these things (hacking).
This question over at GameDev SE has what you're looking for:
https://gamedev.stackexchange.com/questions/4181/how-can-i-prevent-cheating-on-global-highscore-tables
Another discussion on SO about the topic:
Suggestions for (semi) securing high-scores in Flash/PHP game
The summary is that while there are many methods to make cheating difficult, eventually somebody with enough time in their hands will bypass your security measures. The only way to make leader boards hacker proof is to run the game logic on the server.
Best practise would probably be to send the scores over an encrypted connection to your server using some kind of authentication. This is non-trivial and you would likely need to refer to your platform for any crypto/security functionality it makes available.
It is the essence of security research to be able to share a secret over the ether (net). Essentially both parties need to know how to encode/decode the messages but the method for doing that has to be kept secret from the "Man in The Middle".
I'd refer to Tanenbaum's book on Internetworks or have a look at "Trusted Computing Module".

What does facebook know about you with the likebox

We were having a beer talk and have something to clear out.
Is the following conclusion correct:
When I put a facebook-like-button-box on my page, does facebook know
every time I'm on that page, even if i'm not logged in.
basically the same as google analytics
if this nis correct, it should be possible to sandbox, the like-button until someone will use it. Then facebook gets only informations when the user actively confirms that.
cheers endo
No, they can't directly track you if you are not logged in and you view an external "like" button. They can, however, set a tracking cookie that identifies you when you sign in, which would allow them to match the tracking data in the current session to you.
One of Facebook's primary revenue streams comes from the analysis and sale of market trend information. They can analyse the likes and comment keywords of certain user clusters (e.g. middle-aged American females, teenagers in college, etc) and use these to produce statistics about market patterns and trends. They can also use keyword analysis to tell a company how many people are talking about something, e.g. "how many people have mentioned my latest blockbuster film?"
You could simply move the image and JavaScript code away from the Facebook servers and host it locally to avoid them from tracking your users.
In pre-emption of the "FACEBOOK = EVIL" arguments:
In the end, though, is it really a big issue? Some people see Facebook as this massive life-infringing uncaring supercorporation, but in reality they're just making a buck through completely anonymous statistics. No human being (or sentient robot) views your preferences, browser tracking data, or personal information. Everything is anonymised and turned into a bunch of numbers relating to a group. Sure, they could screw everyone over and be evil, but why bother when you already make that much money legitimately?