Billion Dollar Bugs
summary
A scientific, repeatable pipeline combines a decompiler/indexer (contractlibrary.com), a fast transaction debugger and a declarative program analysis engine that binary-lifts bytecode into facts to model all executions. The stack surfaces high-value, exploitable contracts — e.g., a multi-chain bridge flaw abusing a phantom permit in wrapped tokens that exposed ~1 billion approvals and led to ~$3M in bounties. The productized monitor Watchdog is live on Phantom for projects >$10M TVL and proves the approach works.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:35Contract Library
- 3:20Watchdog
- 4:56Methods
- 6:55declarative program analysis
- 9:05major vulnerabilities
- 11:05multichain bridge
related talks
23mThanks for all the bugs!
22mHow Decompilation Uncovers Smart Contract Vulnerabilities
51mA Deal with the Devil: Breaking Smart Contracts
32mSaving Bug Bounties from AI Slop
01mFrom Bugs to Breaches
42mHidden Chains: Revealing High-Impact Bugs from Bounty submissions
48mD1T2 - Smashing Ethereum Smart Contracts for Fun and ACTUAL Profit
01h 31mHow to find Solidity vulnerabilities