The Introduction of Ethereum vulnerability Part1

Executive Summary

이 자료는 BEARS 스터디 그룹에서 초기에 세미나 했던 Ethereum Solidity기반 취약점을 유형별로 정리한 자료입니다. 슬라이드와 해당 슬라이드에 대한 설명으로 구성할 계획이며, 슬라이드에 대한 설명은 틈틈히 작성하도록 하겠습니다.

Presentation

References

• https://blog.sigmaprime.io/solidity-security.html
• https://dasp.co/
• https://consensys.github.io/smart-contract-best-practices/known_attacks/#reentrancy
• https://consensys.github.io/smart-contract-best-practices/known_attacks/#reentrancy
• https://docs.soliditylang.org/en/latest/contracts.html?highlight=fallback#fallback-function
• https://docs.soliditylang.org/en/latest/contracts.html?highlight=fallback#fallback-function
• https://docs.microsoft.com/en-us/azure/security/develop/threat-modeling-tool-threats
• https://docs.microsoft.com/en-us/windows-hardware/drivers/driversecurity/threat-modeling-for-drivers#the-dread-approach-to-threat-assessment
• https://mixbytes.io/blog/collisions-solidity-storage-layouts
• https://medium.com/coinmonks/ethernaut-lvl-6-walkthrough-how-to-abuse-the-delicate-delegatecall-466b26c429e4
• s://github.com/randao/randao
• https://swende.se/blog/Breaking_the_house.html
• https://blog.positive.com/zeronights-ico-hacking-contest-writeup-63afb996f1e3
• https://blog.positive.com/predicting-random-numbers-in-ethereum-smart-contracts-e5358c6b8620
• https://cryptomarketpool.com/front-running-a-solidity-smart-contract/
• https://medium.com/swlh/exploring-commit-reveal-schemes-on-ethereum-c4ff5a777db8
• https://gus-tavo-guim.medium.com/reentrancy-attack-on-smart-contracts-how-to-identify-the-exploitable-and-an-example-of-an-attack-4470a2d8dfe4
• tps://github.com/sraj50/unexpected-ether
• s://www.bookstack.cn/read/ethereumbook-en/spilt.5.c2a6b48ca6e1e33c.md
• https://medium.com/loom-network/how-to-secure-your-smart-contracts-6-solidity-vulnerabilities-and-how-to-avoid-them-part-1-c33048d4d17d
• https://randomoracle.wordpress.com/2018/04/27/ethereum-solidity-and-integer-overflows-programming-blockchains-like-1970/