How to find Solidity vulnerabilities
summary
A practical how-to that shows concrete detection methods: a scanner scans the blockchain for delegate targets and flags implementations that are uninitialized, then checks for SELFDESTRUCT and DELEGATECALL opcodes in bytecode (skipping push literals). Demonstrations use Slither, MythX/Tenderly, Parity trace and local scripts; common pitfalls include admin proxies and ERC‑777 callbacks. Claim: five recurring bug classes account for most finds; the scan yields ~10–20% exploitable hits for manual follow‑up.
AI-written summary · about
chapters (18)
- 0:00Intro
- 4:50SWC Registry
- 8:05Parody Multisig
- 10:25Delegate Calls
- 12:35SpotCheck
- 22:15Noise
- 23:15Initializer
- 24:05Zeppelin
- 24:55Smart Contracts
- 25:55Aetherium
- 27:05Reentrant
- 38:55Tools
- 41:45Vulnerabilities
- 44:25Functions
- 46:25Dot Files
- 47:25Safe Transfer
- 49:25Truffle
- 52:25slither
related talks
22mHow Decompilation Uncovers Smart Contract Vulnerabilities
13mAdvances in Automated Smart Contract Vulnerability
20mSolidity's most common security pitfalls and its best safeguards
20mLearning How to Build Secure Smart Contracts
51mA Deal with the Devil: Breaking Smart Contracts
25mCommSec D2 - Smart Contract (In)Security- 20mLearning How to Build Secure Smart Contracts
18mFavorite DeFi Vulnerabilities