Questions tagged [audit]
The audit tag has no usage guidance.
12 questions
0
votes
1
answer
21
views
DYOR: Smart Contract Hash vs. Audit CheckSum w/ SHA256
Stack Exchange,
First off I would like to say, as a grateful reader on many different stack forums, thank you all for the competent, articulate and drama-free solutions written on these pages. So many ...
- 1
0
votes
1
answer
59
views
Blockchain Layer 2 Attacks
I'm interested in learning more about blockchain security. I've studied the vulnerabilities in Layer 1 and improved my skills. After focusing on smart contract vulnerabilities in Layer 1, I want to ...
- 5
0
votes
0
answers
21
views
why the error is not checked in Hex2Bytes of bytes.go?
https://github.com/ethereum/go-ethereum/blob/master/common/bytes.go
I am looking at the following codes
https://github.com/ethereum/go-ethereum/blob/a3829178af6cec64d6def9131b9340a3328cc4fc/common/...
- 1
0
votes
0
answers
14
views
MEV bot on Github - does it look like a scam? [duplicate]
this one was recently added to Github, my first opinion is that it is probably a scam. Can anyone take a look and let me know if anything fishy is in the smart contract code? If so then I will report ...
- 1
1
vote
2
answers
42
views
Audit Vulnerability Findings
As a person who is interested in smart contract auditing but have never done before I have this question in my head. What if an auditor finds a lets say critical vulnerability which will enable him to ...
- 13
0
votes
1
answer
11
views
Can DAO smart contracts be used to handle issues such as centralized manipulation or initial token distribution?
I wrote an ERC20 smart contract extending standard openzepplein ERC20.sol. While Certik audit, it exposes centralized manipulation and initial token distribution issues.
I am wondering if I can handle ...
0
votes
0
answers
28
views
Safe Module Audit Status
I am building a product using Safe and am interested in using Safe Modules and Guards, but as these introduce possible vulnerabilities by granting a contract root access to a Safe account, I am ...
- 38
0
votes
1
answer
21
views
Purpose of pegged asssets
I'm auditing my first smart contract for a protocol that issues pegged assets collateralized by liquid ETH staking tokens. It also has a decentralized orderbook exchange where you can buy and sell the ...
1
vote
1
answer
26
views
Ask about Reentrancy [Sample reentrant code]
How an attacker could exploit this kinda reentrant SC?
pragma solidity ^0.8.2;
contract Private_Bank
{
mapping (address => uint) public balances;
uint public MinDeposit = 1 ether;
...
- 11
0
votes
1
answer
51
views
What is an re-entrancy attack and how does it work?
With the recent exploit on the omnipools on Conic Finance. The hacker used an exploit called: re-entrancy attack. How does it work explained in layman terms?
And what should smart contract auditors ...
- 4,810
1
vote
0
answers
29
views
What is an example of a runtime verification tool being used to audit a smart contract?
Runtime Verification i a computing system analysis and execution approach based on extracting information from a running system and using it to detect and possibly react to observed behaviors ...
- 12.4k
1
vote
1
answer
30
views
Is this problem a front-running or race-condition or something else?
What is the correct name of this problem in audit terms?
If I have a contract that sells NFTs. The address with the most NTFs has a very high chance to win a prize.
The problem is that 1 address can ...
- 3,257