Questions tagged [bug]

Use this tag for all questions which appear to be a bug and should be reported to upstream project developers.

Filter by
Sorted by
Tagged with
0 votes
1 answer
93 views

New Metamask account randomly sending funds to another wallet

I made a new secondary account under my wallet and immediately transferred funds to it through Coinbase exchange. In less than 4 mins, the new account made a random unauthorized transfer to a random ...
heng heng's user avatar
1 vote
2 answers
34 views

Audit Vulnerability Findings

As a person who is interested in smart contract auditing but have never done before I have this question in my head. What if an auditor finds a lets say critical vulnerability which will enable him to ...
qursk's user avatar
  • 13
0 votes
1 answer
90 views

Invalid implicit conversion from enum to enum

My question is how is it possible to have such error: Error (9553): Invalid type for argument in function call. Invalid implicit conversion from enum CoinType to enum CoinType requested. --> test/...
anonauditor's user avatar
1 vote
0 answers
25 views

How to update a bug-fix UUPS implementation through a DAO vote without revealing the bug(s) it fixes?

Let's say we have a ContractProxy and ContractV1 its implementation, using the UUPS pattern. Along that, there is a DAO that has the rights to perform an update on the implementation contract. Only ...
Pacdac's user avatar
  • 80
1 vote
1 answer
24 views

remix.ethereum.org - you cannot test payable methods

I am using: https://remix.ethereum.org contract: // SPDX-License-Identifier: MIT pragma solidity ^0.8.0; contract Receiver { receive() external payable {} function getMoney() public payable ...
Harry's user avatar
  • 11
0 votes
2 answers
38 views

Can frontrunners modify transaction parameters

I am asking if it's possible to change parameters of a function called, for example: function updatePrice(uint128 price) public onlyOwner{ latestPrice = price; lastPriceUpdate = ...
anonauditor's user avatar
1 vote
2 answers
237 views

Chainlink Stale Data latestRoundData() guide

How do we know if the validation of checking stale data is sufficient? Is only checking timestamp data sufficient? (uint256 roundId,,, uint256 updatedAt, uint80 answeredInRound) = ...
anonauditor's user avatar
1 vote
0 answers
114 views

ECDSA wrong signature

I am facing a problem with my NFT Marketplace contract. I have LibOrder , LibOrderValidator and Marketplace contracts. When I want to create an order, I need to get a signature and I get a ...
0x.MRX's user avatar
  • 11
0 votes
0 answers
27 views

bug in the contract/I cant deploy but I dont see it it fails when I want to deploy it its not a gas problem

/** *Submitted for verification at Etherscan.io on 2023-04-24 */ /* Your Name Token is a cryptocurrency inspired by the popular anime movie "Your Name", which has gained the admiration ...
ocean's user avatar
  • 1
0 votes
0 answers
12 views

I executed a transaction but it does not appear in history

I found a bug when calling the API. The transaction with nonce #42 is succesfully executed as you can see in the explorer (https://polygonscan.com/tx/...
Victor Merino's user avatar
0 votes
2 answers
63 views

Mock3Aggregator.sol refuses to compile

I am currently working on deploying a contract in my local hardhat network, the files below: MockV3Aggregator.sol - the smart contract pragma solidity ^0.6.0; import "@chainink/...
Dhaniel's user avatar
0 votes
0 answers
84 views

Bscscan Verification Error

https://bscscan.com/address/0xd9fe39eb244f5516613d1ee1c76cddbe473085fd#code Although my TokenFactoryDef contract is verified, the contracts created under it are unverified and I cannot verify it ...
0x.MRX's user avatar
  • 11
0 votes
1 answer
17 views

How are cases of wrong data published to the blockchain handled?

How are cases of wrong data published to the blockchain handled? Let's say I am Defi protocol or even an oracle...and shit always happens, there was a mistake somewhere and the wrong data get ...
Finlay Weber's user avatar
1 vote
1 answer
29 views

Is this problem a front-running or race-condition or something else?

What is the correct name of this problem in audit terms? If I have a contract that sells NFTs. The address with the most NTFs has a very high chance to win a prize. The problem is that 1 address can ...
Majd TL's user avatar
  • 3,217
0 votes
0 answers
43 views

Does ENS implement EIP-2304 yet?

I have registered an ENS domain: ncwc6edqldzy6mlo.eth (on mainnet) It uses the default registry: 0x00000000000C2E074eC69A0dFb2997BA6C7d2e1e And the following public resolver: ...
q9f's user avatar
  • 32.9k
0 votes
1 answer
57 views

Runtime error for reversing bytes in Solidity!

I decided to use the below code to reverse bytes32 values in Solidity: pragma solidity ^0.8.0; contract Reverse{ function reverse(bytes32 pad) pure public returns(bytes memory){ bytes ...
Alireza's user avatar
  • 533
1 vote
1 answer
1k views

Unable to connect Metamask iOS app via WalletConnect

Hi I am an iOS developer who is developing a dAAP app for a client. The app prioritizes the use of metamask iOS app. We connect to the app via WalletConnectSwift and launch Metamask app via a https://...
David Záruba's user avatar
0 votes
0 answers
147 views

how do I decompile a code that has some bugs inside using bytecode?

i was tried to understand the codes inside a SC on BSC recently and i found some weird codes inside the decompiled section. i know some little solidity programming and tried to use Remix to reverse it ...
SaveHen's user avatar
0 votes
1 answer
55 views

Ethernaut #16 Preservation. Contract loaded from address in Remix fails to fully interact with contract. Strange bug

Ethernaut's Preservation is solved by exploiting that the delegate call to LibraryContract in setFirstTime() and setSecondTime() in fact changes the first variable in Preservation itself (not in ...
Simon's user avatar
  • 1
1 vote
0 answers
96 views

Pure function that reads from storage, compiler bug?

I just came across this while testing around with the Diamond Storage pattern. Here is a 'pure' function that reads from storage. This had me wondering, is there actually any difference between pure ...
phaze's user avatar
  • 1,575
1 vote
1 answer
374 views

remix-desktop BUG :White Screen on Remix Desktop IDE

White Screen on Remix Desktop IDE The mistake changed again 。。。。。。。。。。。。。。。。
ja1r's user avatar
  • 11
0 votes
1 answer
30 views

False positives for Block State Dependency vulnerability

I've been analysing the contract in https://github.com/SoftSec-KAIST/Smartian/blob/main/examples/sol/BD_false.sol, which contains false positives for the bug Block State Dependency (see https://...
fff's user avatar
  • 1
0 votes
1 answer
76 views

I cannot divide these two values together in solidity

function calculate( uint index )public view returns(uint, uint, bool){ uint avh1; uint avh2; uint avh3; uint avl1; uint avl2; uint avl3; uint allowbuy; uint ...
khunachik's user avatar
1 vote
1 answer
2k views

ERROR "execution reverted: AssetContractShared#creatorOnly: ONLY_CREATOR_ALLOWED"

I am doing a two step minting process. user will setApprovalForAll for a new contract to transfer old tokens user will burn old tokens and mint new ones from the new contract Burn and mint function ...
Kevin Sims's user avatar
1 vote
3 answers
2k views

Incorrect Uniswap Liquidity Calculations. What could be wrong?

Looking though a uniswap address: https://info.uniswap.org/account/0xd62317c76E626D53C900088Fb07539b829B564B2 This address shows that it added $30k+ worth of liquidity, and none of it is removed. Why ...
Patoshi パトシ's user avatar
3 votes
1 answer
3k views

Arrayify error, when passing a string as an argument to a transaction

I have been having this problem with the web3 library for a while now and I am not sure how to solve. I am encoding a transaction within a react app. So far, all contract interactions inside the app ...
cheethas's user avatar
  • 103
1 vote
1 answer
416 views

Why this delegatecall attack not working?

I am confused by this simple contract. The main purpose is to bypass the OnlyContract() modifier. Victim contract. pragma solidity 0.7.6; contract Victim { modifier OnlyContract() { ...
tesgerburger's user avatar
0 votes
1 answer
2k views

A proxy for an upgradeable contract returns a wrong value

https://github.com/vporton/test-web3-read-int128 produces a wrong value. Why? How to correct it? npx buidler run scripts/mytest.js ... -23309975763188660897098281009735482885 (should be 2). pragma ...
porton's user avatar
  • 1,774
1 vote
1 answer
374 views

What was the Rebase Bug on the YAM smart contract?

Smart contracts have great power to absorb money like a black hole. Almost 400$ Million is gone due to a bug in the smart contract of YAM. What was the bug that cause all the destruction? => Could ...
alper's user avatar
  • 8,395
1 vote
1 answer
568 views

Integer underflow/overflow

What is integer overflow and underflow and how it can be possible? I saw its example that coders avoid this bug by require(balanceOf(_to) +_value >= balanceOf(_to)) where _value is an unsigned ...
uzair kath's user avatar
0 votes
1 answer
83 views

smart contract is too smart: different bahaviors of smart contract on different version of geth or solidity

recently I am learning how to deploy and call smart contract on ethereum. I am working on a very simple contract as follows: pragma solidity >=0.4.24 <0.6.0; contract TestContract{ uint ...
D.V.'s user avatar
  • 15
1 vote
0 answers
60 views

Is there a curated list of known security vulnerabilities related to escrow?

In Factories Improve Smart Contract Security, Steve Marx says that: This bug was hand-picked to show the benefit, but this bug is representative of a large class of bugs around escrow. In my ...
Paul Razvan Berg's user avatar
0 votes
1 answer
43 views

How is it possible to print tokens out of nowhere with the batchOverflow problem?

As stated in the title I've been looking at the Batch Overflow issue that happened last year where someone printed tokens out of nowhere. I see that when you create a token, you specify a totalSupply ...
strangethingspy's user avatar
1 vote
1 answer
99 views

ABIEncoderV2PackedStorage bug, is something to worry about? any info?

I have a simple factory of ERC-20 Tokens, deployed to Rinkeby using remix. When I create contracts with this factory and verify the code in Etherscan (using etherscan API) I am having this warning in ...
lisandrom's user avatar
4 votes
2 answers
7k views

IPFS gateway not getting my files , Keeps on loading without any errors

After making all the client side scripts inside a folder which are needed for my website (in dist folder) checked with ipfs swarm peers : shows many results then adding the files with ipfs add -r ...
CryptoScroller's user avatar
1 vote
0 answers
78 views

window.Web3 is missing in Mist

When I open the below HTML code in Mist 0.11.1 the popup shows empty that is window.Web3 is undefined! How to make window.Web3 to work in Mist? My code similar to this works in MetaMask but not in ...
porton's user avatar
  • 1,774
1 vote
1 answer
584 views

Nested structs that are part of a mapping broken in Solidity 0.5.0?

The following code compiled successfully with Soldity 0.4.21. With 0.5.0 it triggers a fatal compilation error as follows: UnimplementedFeatureError: Encoding type "struct TestNestedStructInMapping....
Robert Oschler's user avatar
0 votes
1 answer
38 views

What is the recommended procedure to report potential vulnerabilities in a smart contract?

I was browsing etherscan's verified smart contracts (i.e. the ones with the source code attached), and I saw that one of the smart contracts contain (or at least I think it contains) a potential ...
Briomkez's user avatar
  • 1,894
1 vote
0 answers
391 views

Remix - Contract A doesn't work anymore when I deploy contract B

I recently had to deploy my second contract on the local Ganache Blockchain (Windows) using http://remix.ethereum.org/. But every single time I deploy contract B after I deployed contract A, contract ...
Tobias Thiele's user avatar
1 vote
1 answer
620 views

Geth account unlocked for 2 seconds

My question relates to a older question on this stackexchange. Details Patrick used the Ethereum Wallet to transfer 1 ether to test out buying TheDAO tokens on his mining computer. When (so far it ...
Flaqz's user avatar
  • 25
1 vote
2 answers
2k views

geth: command not found (Ubuntu)

I have Ubuntu 18.04 installed, and I just installed Mist. To my understanding, installing Mist should have installed Geth as well, but when I do the command geth in a terminal, I receive geth: ...
Webeng's user avatar
  • 895
0 votes
1 answer
52 views

Mist can't run on a testnet?

When I install Mist, and after a bit of loading, it starts downloading the blockchain for the mainnet, but when I change the network, I get an error that it's not connecting. If I try to restart mist (...
Webeng's user avatar
  • 895
0 votes
2 answers
369 views

Why Deployment of ERC20 token contract to Ropsten is taking lot of time?

I'm trying to deploy my ERC20 token contract on Ropsten network, It took 2hr 30 mins and still pending, what is happening, any problem with deployments? Is it linked to the recent batchOverflow Bug ...
Fariha Abbasi's user avatar
0 votes
0 answers
457 views

MetaMask sometimes infinite loading

my MetaMask does sometimes load infinitely. It then says "Connecting to Main Network" until I click on "Ropsten" and then back to "Main Network". That normally is no problem for me. But as I am a ...
dkb's user avatar
  • 723
1 vote
0 answers
404 views

Error: new BigNumber() not a base 16 number when use map

I am new to Solidity programming and writing smart contracts for one of the application. I test the contract on my private train: contract Proof { struct FileDetails { uint timestamp; ...
miumiu's user avatar
  • 11
0 votes
1 answer
129 views

(SOLIDITY) Address in mapping - BUG?

Original post: Sorry I just found out this way it actually works. But the problem is when I trying to look up address manually, not by msg.sender. Code: mapping (address => uint) count; ...
patulincekxxx's user avatar
0 votes
1 answer
688 views

Help - Token holder has more tokens than total supply

I found a token, where the total supply is 200000000000000 (200,000,000,000,000) and the decimals are 8 so the total supply should be 2M. But now there is a token holder that generated tokens ...
dkb's user avatar
  • 723
2 votes
0 answers
125 views

How can gasUsed of a transaction be lower than the gas used by internal transactions?

Take this transaction for example: https://etherscan.io/tx/0xb8c2ee4dcc07352b535317304ca64ada5b03ab3c868a2281609cfd4ac4c619e9 It reports a gasUsed of 163215 when calling the contract. On the other ...
user27376's user avatar
1 vote
2 answers
883 views

Where to post: Rinkeby Authenticated Faucet down with respect to Twitter?

When attempting to use the Rinkeby Authenticated Faucet from Chrome or FF, I just get the error: zlib: invalid header It's not due to time limits (not even close), the Tweet post includes the address ...
WBT's user avatar
  • 565
1 vote
0 answers
49 views

Metamask- Out of gas error [duplicate]

I have a question about my Ethereum Stack Exchange post: Metamask Out of gas error I cannot transfer Ethereum from Metamask. It gives me out of gas error. I was trying to transfer just 1 of 5 ethers ...
Shiraz Abbas's user avatar