Friday , September 18 2020
Home / Video / #HITB2018AMS D1T2 – Smashing Ethereum Smart Contracts for Fun and ACTUAL Profit – Bernhard Mueller

#HITB2018AMS D1T2 – Smashing Ethereum Smart Contracts for Fun and ACTUAL Profit – Bernhard Mueller



Ethereum is an open software program blockchain platform that permits builders to construct and deploy decentralized apps. Over the previous couple of years, its cryptocurrency Ether has taken the quantity two spot in market cap second to Bitcoin.

In Ethereum, state transitions are mediated by code (a.ok.a “good contracts”) working within the Ethereum Digital Machine (EVM) which boasts a turing-full instruction set, permitting for close to-limitless use instances together with (however not restricted to) crypto kitties. Nevertheless, with nice flexibility comes nice potential for vulnerabilities. And in accordance to Murphy’s regulation, catastrophe has stricken a number of instances, leading to lots of of tens of millions value of Ether being stolen or caught in limbo for all eternity.

On this discuss, I’ll examine latest incidents, and make clear the assorted kinds of flaws that happen in Ethereum good contracts. I’ll present the right way to discover the blockchain and reverse engineer good contract binary code utilizing Mythril, the “nmap of Ethereum”. I’ll additionally reveal the usage of symbolic evaluation to detect several types of vulnerabilities, together with these ensuing from inter-contract calls. Lastly, I’ll present the right way to autogenerate Ethereum exploits utilizing the Z3 solver.

===

Bernhard is a safety engineer at Consensys and a hacker with a decade-lengthy monitor file. He has discovered dozens of zero day flaws in broadly used software program, printed assaults on core Web protocols, and written award-profitable papers. He’s additionally a winner of BlackHat’s “Finest Analysis” Pwnie Award.

About beheer

Check Also

Crypto Law 2020, XRP In Australia, Ethereum 3000 TPS, Tether Raging & Bitcoin Fundamentals

My Second Channel: —————————————————————————- Assist Me On Patreon! —————————————————————————- Defend And Retailer Your Crypto With …

Datadash and Richard Heart talk all things Bitcoin and Ethereum in Singapore

Declare free HEX tokens! Launching this month. The First Excessive Curiosity Blockchain Certificates of Deposit …