Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Assist Ethereum Transactions Gas Bridges

ASecurity

Assist with Ethereum transactions, gas optimization, token approvals, and L2 bridges.

19 stars
0 votes
0 copies
0 views
Added 9/19/2026
ai-agentsgosecurity

Security Analysis

A100/100

Scanned 9/19/2026

Install to Claude Code

$npx -y skills add rondoflow/rondoflow --skill assist-ethereum-transactions-gas-bridges --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Assist Ethereum Transactions Gas Bridges?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Assist Ethereum Transactions Gas Bridges
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/rondoflow-assist-ethereum-transactions-gas-bridges/badge)](https://www.skillsdirectory.com/skills/rondoflow-assist-ethereum-transactions-gas-bridges)

More formats (shields.io, HTML) on the badges page.

Download with Pro
Files
SKILL.md
---
name: assist-ethereum-transactions-gas-bridges
description: "Assist with Ethereum transactions, gas optimization, token approvals, and L2 bridges."
category: "Finance & Crypto"
author: community
version: "1.0.0"
icon: coins
---

## Nonce and Stuck Transactions
- Every Ethereum account has a nonce that increments with each transaction — if tx with nonce 5 is pending, nonces 6+ are blocked until 5 confirms
- To unstick: send a new tx with the SAME nonce and higher gas — this replaces the pending tx (even a 0 ETH self-transfer works)
- MetaMask "Speed up" and "Cancel" buttons do exactly this — they resubmit with same nonce and higher priority fee
- Nonce gaps cause permanent stuck state — if nonce 3 was never broadcast but 4 was, 4 will never confirm until 3 is sent

## Gas (EIP-1559)
- `maxFeePerGas` = max total you'll pay per gas unit. `maxPriorityFeePerGas` = tip to validator. `baseFee` = burned, set by protocol
- Actual cost: `min(baseFee + priorityFee, maxFee) × gasUsed` — unused gas is refunded, but failed txs still consume gas
- Gas limit is separate from gas price — setting limit too low causes "out of gas" revert, but you still pay for gas used up to that point
- Check current base fee at etherscan.io/gastracker or via `eth_gasPrice` RPC — wallets often overestimate by 20-50%

## Token Approvals (Critical Security)
- ERC-20 `approve()` grants a contract permission to spend your tokens — many dApps request unlimited (type(uint256).max) approval
- If that contract gets hacked, attacker can drain all approved tokens even years later — audit approvals at revoke.cash
- Recommend users approve only the exact amount needed, or revoke after each use
- Approvals persist forever until explicitly revoked — changing wallets doesn't help if the old address still has tokens

## Failed Transactions
- A reverted transaction is mined and consumes gas — you pay even though nothing happened
- Common causes: slippage exceeded, deadline passed, insufficient token balance, contract paused
- "Transaction failed" in explorer means it executed but reverted — completely different from "pending" (not yet mined)
- Simulating transactions before sending (via Tenderly or wallet preview) catches most revert conditions

## L2 Bridges and Withdrawals
- Optimistic rollups (Optimism, Arbitrum, Base) have 7-day withdrawal period to mainnet — this is not a bug, it's the security model
- ZK rollups (zkSync, Starknet) have faster finality but bridging back still takes 1-24 hours depending on liquidity
- Third-party bridges (Hop, Across) offer faster exits but charge fees and have smart contract risk
- Never bridge more than you can afford to wait 7 days for — or use a fast bridge and accept the fee

## MEV Protection
- Public mempool transactions can be frontrun or sandwiched — especially swaps on DEXs
- Flashbots Protect RPC (protect.flashbots.net) hides transactions from public mempool until mined
- Private transaction options: MEV Blocker, Flashbots Protect, or DEXs with native protection (CoW Swap)
- Signs of sandwich attack: swap executed at worse price than quoted, with suspicious txs immediately before and after yours

## Address Validation
- Ethereum addresses are case-insensitive but the checksum (mixed case) catches typos — `0xABC...` vs `0xabc...` are the same address
- ENS domains can expire — always verify current owner before sending to a .eth name
- Contract addresses vs EOA: contracts can reject ETH transfers or behave unexpectedly — check on etherscan if address has code
- Some tokens have multiple addresses (official + scam clones) — verify contract address on CoinGecko or project's official site

Attribution

rondoflowrondoflow
View sourceMore from rondoflow →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Caveman

Ultra-compressed communication mode that cuts output tokens while keeping technical accuracy. Levels: lite, full, ultra and the wenyan variants. Use for /caveman, "caveman mode", "talk like caveman", "be brief" or "less tokens".

1074701 votes

Hyperplan

Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...

693621 votes

Mcp Code Execution

Routes multi-tool workflows through MCP servers for large datasets and pipelines. Use when Bash tool overhead is limiting throughput on data-heavy tasks.

3351 votes

catchup

Recovers the conversation and failed tool calls of a previous Codex, Claude Code, Antigravity, Cline, Copilot CLI, Cursor, DeepSeek Harness, Kimi, OpenCode, Pi Agent, or ZCode session. Use when the user says "catch up", "what did the last session do", "get me up to speed", "I switched agents", asks to recover/summarize a previous session before continuing, or asks to diagnose or report a catchup failure. Do NOT use for the current conversation, git history, or any non-agent log.

691 votes

math-skill

A comprehensive mathematical reasoning skill for AI assistants — handles arithmetic to research-level problems with rigorous step-by-step reasoning, systematic verification, and transparent uncertainty handling

381 votes
View all in ai-agents →