Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [audit]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
2 answers
36 views

Audit Vulnerability Findings

As a person who is interested in smart contract auditing but have never done before I have this question in my head. What if an auditor finds a lets say critical vulnerability which will enable him to ...
qursk's user avatar
  • 13
1 vote
1 answer
26 views

Ask about Reentrancy [Sample reentrant code]

How an attacker could exploit this kinda reentrant SC? pragma solidity ^0.8.2; contract Private_Bank { mapping (address => uint) public balances; uint public MinDeposit = 1 ether; ...
Bitpl0rer's user avatar
1 vote
0 answers
26 views

What is an example of a runtime verification tool being used to audit a smart contract?

Runtime Verification i a computing system analysis and execution approach based on extracting information from a running system and using it to detect and possibly react to observed behaviors ...
Patrick Collins's user avatar
1 vote
1 answer
30 views

Is this problem a front-running or race-condition or something else?

What is the correct name of this problem in audit terms? If I have a contract that sells NFTs. The address with the most NTFs has a very high chance to win a prize. The problem is that 1 address can ...
Majd TL's user avatar
  • 3,237
0 votes
1 answer
45 views

What is an re-entrancy attack and how does it work?

With the recent exploit on the omnipools on Conic Finance. The hacker used an exploit called: re-entrancy attack. How does it work explained in layman terms? And what should smart contract auditors ...
Patoshi パトシ's user avatar
0 votes
0 answers
19 views

why the error is not checked in Hex2Bytes of bytes.go?

https://github.com/ethereum/go-ethereum/blob/master/common/bytes.go I am looking at the following codes https://github.com/ethereum/go-ethereum/blob/a3829178af6cec64d6def9131b9340a3328cc4fc/common/...
ak tech's user avatar
0 votes
0 answers
13 views

MEV bot on Github - does it look like a scam? [duplicate]

this one was recently added to Github, my first opinion is that it is probably a scam. Can anyone take a look and let me know if anything fishy is in the smart contract code? If so then I will report ...
DanijelB's user avatar
0 votes
1 answer
11 views

Can DAO smart contracts be used to handle issues such as centralized manipulation or initial token distribution?

I wrote an ERC20 smart contract extending standard openzepplein ERC20.sol. While Certik audit, it exposes centralized manipulation and initial token distribution issues. I am wondering if I can handle ...
Lazy Knight's user avatar
0 votes
0 answers
23 views

Safe Module Audit Status

I am building a product using Safe and am interested in using Safe Modules and Guards, but as these introduce possible vulnerabilities by granting a contract root access to a Safe account, I am ...
Liam's user avatar
  • 38
0 votes
1 answer
19 views

Purpose of pegged asssets

I'm auditing my first smart contract for a protocol that issues pegged assets collateralized by liquid ETH staking tokens. It also has a decentralized orderbook exchange where you can buy and sell the ...
auditor_chick's user avatar