Roblox reports Q3 bookings down 12% YoY to $1.7B, vs. $1.63B est., and DAUs down 9% to 138M, vs. 145.8M est.; RBLX drops 16%+ after hours (Cecilia D'Anastasio/Bloomberg)

Building an offline snag-list app with Expo, Skia and pdf-lib

A snag list (a punch list in the US) is the walk-round at the end of a job: you photograph every defect, mark it up, note where it is, and send the builder one numbered report.

• PunchSheet is an offline snag list app priced at $9.99
• Uses Expo SQLite for data storage and React Native Skia for markup
• Backup achieved through single .punchsheet file

2h ago ·dev.to

Flash Loan Attack Vector Analysis: Veda

Flash Loan Attack Vector Analysis: Veda Target Protocol : Veda (TVL: $1819.4M) Veda – Flash‑Loan Attack Vector Analysis TVL: ≈ $1.819 B (Ethereum + L2) Prepared by: Senior DeFi Security Researcher…

• Oracle price manipulation via flash loan-driven token swaps could cause up to 30% TVL loss
• Flash loan-enabled liquidation sandwich attacks could steal up to 5% TVL
• Implement multi-source oracles to mitigate risks from single-source oracle weakness

2h ago ·dev.to

Test the two OAuth boundaries in an MCP proxy

An MCP proxy can validate a token correctly and still authorise the wrong business operation. It can also accept a genuine token that was never meant for the proxy.

2h ago ·dev.to

SEC charges two entities in $130 million scheme that used false SEC filings to lure investors

📅 29 October 2026 • SEC SEC charges two entities in $130 million scheme that used false SEC filings to lure investors The Securities and Exchange Commission charged two foreign-operated…

2h ago ·dev.to