New answers tagged

0 votes

Are Chainlink keepers a security liability?

Keepers are a bit different. They just run a function you specify, so there's not really any way for them to be malicious other than just ignoring your request (at which point you (or anyone) can ...
user avatar
  • 3,379
0 votes

Ethernaut level 20 Denial probably no longer solvable. Why?

// SPDX-License-Identifier: MIT pragma solidity ^0.6.0; contract AttackerContract { fallback() payable external { while(true){ } } } This solution ...
user avatar
0 votes

If it Safe to Expose Geth RPC to Public Internet

In your terminal: sudo apt install apache2-utils -y sudo htpasswd -c /etc/nginx/.gethauth username then in your nginx conf: server { listen 80 default_server; location / { ...
user avatar
1 vote
Accepted

How to fix vulnerability in solidity contract

If you look at the transaction on tenderly, the exploiter changed the dailyReturnsInBPS to a large number before they drained your contract. This is possible because the function setDailyReturns has ...
user avatar
  • 452
1 vote

How to ensure the security of computation and transmition on Smart Contracts?

In a public blockchain like Ethereum, you can't guarantee these. Your biggest issue is that once the trusted third party issues the transaction, anyone can see it and its contents (even before it's ...
user avatar
0 votes

Question about ethereum security

If we capture the majority of the nodes of the blockchain we can get the control of it This isn't quite true. Someone suddenly booting up more Ethereum nodes than currently exist (which frankly would ...
user avatar
  • 10.9k
1 vote
Accepted

Is this implementation of Openzeppelin's ECDSA module secure?

The function verifiedMint should be just fine. If the ECDSA algorithm is broken for the elliptic curve that Ethereum uses then the whole blockchain will be broken (any blockchain that uses secp256k1 ...
user avatar
  • 29.6k
0 votes
Accepted

How to encode message using public key ETH address?

This is possible to do. But you will need the public key of the person you are sending a message to. As you correctly said, an address is not a public key. But you also can't, in general, "...
user avatar
  • 775

Top 50 recent answers are included