Solidity 缓冲区错误漏洞

Solidity is a high-level programming language. A security vulnerability exists in Solidity version 0.7.5 due to a stack-use-after-return in "smtutil::CHCSmtLib2Interface::querySolver".No details of the vulnerability are available at this time...

Actual yield source check on address will succeed for non-existent contract

Handle 0xRajeev Vulnerability details Impact Low-level calls call/delegatecall/staticcall return true even if the account called is non-existent per EVM design. Solidity documentation warns: "The low-level functions call, delegatecall and staticcall return true as their first return value if the...

Beebots.TradeValid() Will Erroneously Return True When Maker Is Set To Address(0) and makerIds Are Set To The TokenIds of Unminted Beebot NFTs

Handle jvaqa Vulnerability details Impact Beebots.TradeValid Will Erroneously Return True When Maker Is Set To Address0 and makerIds Are Set To The TokenIds of Unminted Beebot NFTs Beebots.verify Returns True No Matter What Signature Is Given When Signer Is Set To address0. This means that...

VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption

Background @tjayrush reported a data handling issue with certain Web3 libraries using Vyper-deploy forwarder proxy contracts using our Vyper's built-in createforwarderto function prior to our change to support EIP-1167 style forwarder proxies. Impact If you are an end user of a forwarder-style...

Reentrancy Attack

openzeppelin-solidity is vulnerable to reentrancy attack. The vulnerability exists when a extend custom beforeTokenTransfer is invoked when burning tokens and before the send hook is externally called on the sender while token balances are adjusted after the process and this may cause the...

OSV-2020-2131 Stack-use-after-return in solidity::smtutil::CHCSmtLib2Interface::querySolver

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26997 Crash type: Stack-use-after-return READ 8 Crash state: solidity::smtutil::CHCSmtLib2Interface::querySolver solidity::smtutil::CHCSmtLib2Interface::query solidity::frontend::CHC::query...

solidity:strictasm_diff_ossfuzz: Heap-buffer-overflow in solidity::yul::AsmAnalyzer::operator

Project: https://github.com/ethereum/solidity.git Detailed Report: https://oss-fuzz.com/testcase?key=5676096461996032 Project: solidity Fuzzing Engine: libFuzzer Fuzz Target: strictasmdiffossfuzz Job Type: libfuzzerasansolidity Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

Slither v0.6.7 - Static Analyzer For Solidity

Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses. Slither enables developers to find vulnerabilities, enhance their code...

Slither - Static Analyzer For Solidity

Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses. Slither enables developers to find vulnerabilities, enhance their code...

Learn Ethereum Development – Build Decentralized Blockchain Apps

As of today — 1 Bitcoin = $7300 USD Approx 471,000 INR At the beginning of this year, 1 Bitcoin was approximately equal to $1000, and now it has surged to a new height, marking its market capitalization at over $124 billion. Is it really too late to invest in Bitcoin or other cryptocurrencies lik...