Cross Bow.
Smart contracts often revert due to some errors in the EVM , the funds will be reverted and returned to the orignal msg.sender ,and remaining gas is also returned in some cases. We got an intresting attack vector using these cases. Becauseof when cross chain transactions occur it losses its atomicity if a call reverts on destination chain the sender chain wouldn’t know . Causing insolvency between chains. Ofcourse There are methods the reslove this .You send tokens from Chain A to Chain B via...
Cross Bow.
Smart contracts often revert due to some errors in the EVM , the funds will be reverted and returned to the orignal msg.sender ,and remaining gas is also returned in some cases. We got an intresting attack vector using these cases. Becauseof when cross chain transactions occur it losses its atomicity if a call reverts on destination chain the sender chain wouldn’t know . Causing insolvency between chains. Ofcourse There are methods the reslove this .You send tokens from Chain A to Chain B via...
Meditate.
There’s a vulnerable function i want you to try to find it before you proceed on knowing the answer. It’s rather a very beautiful exploit.function _deposit( address account, uint256 amount, uint256 duration ) private { if (_deposits[account] > 0 && amount > 0 && duration > 0) revert ChangeAmountAndUnlockTimeForExistingAccount(); if (amount > 0) { oneInch.transferFrom(msg.sender, address(this), amount); _deposits[account] += amount; totalDeposits += amount; } uint256 locked...
Meditate.
There’s a vulnerable function i want you to try to find it before you proceed on knowing the answer. It’s rather a very beautiful exploit.function _deposit( address account, uint256 amount, uint256 duration ) private { if (_deposits[account] > 0 && amount > 0 && duration > 0) revert ChangeAmountAndUnlockTimeForExistingAccount(); if (amount > 0) { oneInch.transferFrom(msg.sender, address(this), amount); _deposits[account] += amount; totalDeposits += amount; } uint256 locked...
Rather Deep.
Compund Finance storage collision Compound Finance is one of the largest Fianace yet . It lets users to deposit their ETH or the acceptable ERC-20 into the contract . Based on the deposited ETH user recieve corresponding amount of cToken. User can redeem their token back by burning the cToken. It also specially integrates the TUSD , this has rather a special functionality , the compound mostly relies on TUSD if user deposits the TUSD the compound Fi mints the cTUSD. Vulnerability Details So t...
Rather Deep.
Compund Finance storage collision Compound Finance is one of the largest Fianace yet . It lets users to deposit their ETH or the acceptable ERC-20 into the contract . Based on the deposited ETH user recieve corresponding amount of cToken. User can redeem their token back by burning the cToken. It also specially integrates the TUSD , this has rather a special functionality , the compound mostly relies on TUSD if user deposits the TUSD the compound Fi mints the cTUSD. Vulnerability Details So t...
