Security & Smart Contract Ⅱ
summary
Automated analysis platform IoTCube scans 171 blockchain projects and flags 83 CVEs by matching known patches to reused code; the team restores and links about 65,000 recovered functions to exploit patterns and reports over 500,000 discovered issues across users. Detection combines a signature tool called H‑Mark and a code‑similarity engine to find cloned libraries, showing that heavy code reuse (up to 90% similarity) propagates unpatched vulnerabilities across forks and wallets.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:15Blockchain software vulnerabilities
- 4:36Code reuse security links
- 6:51IoT cube analysis platform
- 9:02Vulnerability patching methods
- 12:18Analysis results and CVEs
- 15:41Code duplication security
- 18:42Open-source security limits
- 20:33Security management responsibilities
- 21:16Q&A
related talks
01h 31mHow to find Solidity vulnerabilities
31mEthainter: A Smart Contract Security Analyzer for Composite Vulnerabilities
51mA Deal with the Devil: Breaking Smart Contracts
17mTools & training for more secure software
18mSecurePoC: A Helping Hand to Identify Malicious CVE Proof of Concept Exploits in GitHub
23mThanks for all the bugs!
29mWorms, Tokens, and Trust The Industrialization of Supply Chain Attacks
43mCybersecurity and Global Collaboration for Securing the Web 3.0 Ecosystem