For the following paper, I can’t understand the text written below: https://arxiv.org/pdf/1806.01143.pdf

Our violation pattern checks that the amount of the call instruction is determined by a value read from the storage, whose offset in the storage is known (i.e., it is constant), and that this value can be updated.

My question is that the victim would send the amount of transaction through the instruction i.e. "send". But attacker reads the value from the storage. How the attacker alters the value sent using the built-in 'send' method by reading the data from the storage? Why the attacker is not using some random value if the attacker wants to change the order of transaction?

Some body please guide me.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.