Search for a command to run...
Welcome to number two of my Solidity attack vectors series. In this article, I will be talking about "Contracts with zero code size" – the meaning, applications, and how they are being used by malicious actors. As the name implies, these are contract...
Introduction If you're familiar with Ethereum, you'll know that smart contracts are the network's backbone. They enable developers to create decentralized applications (dapps) that are secure, transparent, and trustless. However, traditional smart co...
Insufficient gas griefing occurs when a contract makes one or more external function calls and does not check for return values or whether the external function call was successful. In this type of attack, the attacker provides a small amount of gas ...
The concept of gas and gas fees on Ethereum is not new. These are concepts that the blockchain uses to control excessive computational work on the Ethereum Virtual Machine (EVM). For every block in the blockchain, there is a block gas limit. This lim...
Solidity Attack Vectors: #8 No Address Zero Check There's no lie in saying that the "address" type is one of the most used data types in Solidity, especially when dealing with any value or receiving of values. The Zero Address The Zero Address is an ...
Solidity is a contract-oriented programming language that has the ability to hold value (Ether). Many smart contracts deal with value, such as for savings, lending, trades, or other concepts related to value. This brings financial freedom due to the ...
In my last article in this series, I introduced the DoS(Denial Of Service) attack on smart contracts and blockchain. In this article, I will be discussing another form of DoS attack on solidity smart contracts- "DoS With Unexpected Revert". Reverts I...
Block stuffing is a type of attack in which an attacker floods the network with many transactions, making it difficult for legitimate transactions to be processed. In this article, we will learn about how block-stuffing attacks work. What Is A DoS At...
Welcome to the fourth article in this series. If you haven't read the previous articles where I wrote about some other attack vectors in Solidity smart contracts, please do well to check them out. Lets talk about "private" data In this article, our f...