0

I have a website with NODEJS and it's a Dapp.

There is some button to click and open MetaMask for signing a transaction.

I think an attacker car replace my ABI+Contract address and inject them with his contract and ABI. So if he take advantage of it, he can redirect ETH fund to his own benefit.

Is there any security to avoid this ?

Improve this question
2
  • Hi there. At what point do you think the attacker would inject his own code?
    – Richard Horrocks
    Apr 17 '21 at 21:28
  • Expanding on @RichardHorrocks's comment, could you supply the code you're using to do this, and how you think an attacker could hijack it?
    – Linum Labs
    Apr 18 '21 at 10:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.