Hybrid Attack Synthesis for DeFi
summary
Veridise offers two open-source tools: Vanguard performs cross-chain, pattern-based static analysis (compiles to LVM), flags concrete issues like reentrancy and flash‑loan price-manipulation with low false positives and is extensible; Eurus uses symbolic execution to synthesize concrete exploit contracts from DSL queries (example query: lending pool balance equals zero after attack), producing an attack() that approves, swaps on Uniswap to inflate a denominator, then borrows and drains funds. Tooling is blockchain-agnostic but currently prototype-scale with ongoing work on path-explosion scalability.
AI-written summary · about
chapters (11)
- 0:00Start
- 0:33Overview
- 1:24Common Vulnerabilities
- 2:13Attack Generation
- 3:28Vanguard
- 6:14Example Lending Pool
- 6:27Flash Loan
- 7:05Flashlight Attack
- 7:44Attack Synthesis
- 12:38Business Model of Verdice
- 13:45Do You Have a Pricing Structure for Our Services
related talks
22mHow Decompilation Uncovers Smart Contract Vulnerabilities
10mHow to Understand a Smart Contract Hack
01h 33mWhite Hat Panel: DeFi Exploits
18mFavorite DeFi Vulnerabilities
51mA Deal with the Devil: Breaking Smart Contracts
13mAdvances in Automated Smart Contract Vulnerability
01h 31mHow to find Solidity vulnerabilities
22mA Multi-Layer Dynamic Security Framework for DeFi Smart Contracts