A Deal with the Devil: Breaking Smart Contracts
summary
A practical toolkit for finding real vulnerabilities in deployed contracts, showing concrete failures: reentrancy drain $50M (DAO), Parity multi‑sig: $30M stolen & $280M frozen, exploitable randomness, front‑running, integer overflows and DoS patterns that lock funds. Demonstrates exploit mechanics (delegatecall misuse, fallback reentrancy, miner-timestamp and tx-fee ordering), recommends SafeMath/OpenZeppelin libraries, formal verification prospects, and hands-on tooling: Remix debugger + static analysis alongside Mythril/Manticore. Releases a reproducible top‑10 list and a CTF to practice the techniques.
AI-written summary · about
chapters (5)
related talks
25mCommSec D2 - Smart Contract (In)Security
43mOutsmarting Smart Contracts
12mSmart Contract Security
20mLearning How to Build Secure Smart Contracts
48mD1T2 - Smashing Ethereum Smart Contracts for Fun and ACTUAL Profit
01h 33mWhite Hat Panel: DeFi Exploits
10mHow to Understand a Smart Contract Hack
18mFavorite DeFi Vulnerabilities