21 Sneaky Smart Contract Bugs | Do Not Miss These!

  Рет қаралды 3,240

Owen Thurm

Owen Thurm

Күн бұрын

Пікірлер: 28
@darshangaikwad1392
@darshangaikwad1392 Жыл бұрын
Great please make more videos
@0xOwenThurm
@0xOwenThurm Жыл бұрын
More on the way!
@tshawn6751
@tshawn6751 Жыл бұрын
Hey Owen, thank you for the content. Quick one: how often do you use checklists when auditing SC?
@0xOwenThurm
@0xOwenThurm Жыл бұрын
I use an "auditing brain" so that common findings never go missed every time.
@soaphornseuo8630
@soaphornseuo8630 Жыл бұрын
You have done many great things for web3 community
@0xOwenThurm
@0xOwenThurm Жыл бұрын
So glad I could help ser! More on the way 🫡
@Ggs-fe8ji
@Ggs-fe8ji Жыл бұрын
One more question if I may….when using mstore in assembly should we always declare a memory variable after the assembly block and before the subsequent high lvl solidity code to make sure the high level code does not overwrite the memory slot which was written to in the assembly block? I would really appreciate an answer! Your channel helps me ao much in my web 3 journey!
@0xOwenThurm
@0xOwenThurm Жыл бұрын
You should just update the free memory pointer that is stored at the 0x40 memory word so that it points to after all the memory you just wrote in the assembly block.
@jingli9232
@jingli9232 Жыл бұрын
OMG, Owen, you're the best!
@0xOwenThurm
@0xOwenThurm Жыл бұрын
Glad this could help! ❤
@Ggs-fe8ji
@Ggs-fe8ji Жыл бұрын
When upgrading a contract should the immutable values be set in the initializer function of the upgraded implementation?
@0xOwenThurm
@0xOwenThurm Жыл бұрын
Previously immutable values could only be set in the constructor. Immutable values are a part of the contract bytecode, so they should not be stored on the proxy if you expect them to be used in the implementation contract.
@SaurabhBhai-t8k
@SaurabhBhai-t8k Жыл бұрын
Precision loss one is Awesome But mostly depends on program either accept it or not ( Based on true Events)
@0xOwenThurm
@0xOwenThurm Жыл бұрын
Absolutely, all of these depend on the system at hand!
@maueth_
@maueth_ Жыл бұрын
#11, #16 and #20 are really interesting
@0xOwenThurm
@0xOwenThurm Жыл бұрын
Remember those for future audits you do!
@erictee9416
@erictee9416 Жыл бұрын
Great content 🫡
@0xOwenThurm
@0xOwenThurm Жыл бұрын
Glad you liked it!! More on the way 🫡
@allanway534
@allanway534 Жыл бұрын
In the `gas greifing` part, it's actually not correct to say the cost of memory expansion is `exponentially`, use `quadratically` is accurate.
@0xOwenThurm
@0xOwenThurm Жыл бұрын
Good point!
@codeWithBala
@codeWithBala Жыл бұрын
Owen , My kind request as your subscriber can you please upload a video in which you go through each line of uniswap it would be very useful for beginners.
@0xOwenThurm
@0xOwenThurm Жыл бұрын
Added to my list ser! V2 or V3?
@codeWithBala
@codeWithBala Жыл бұрын
@@0xOwenThurm v2 will be good ! Thankyou soo much brother ❤️.
@stevekimani.111
@stevekimani.111 Жыл бұрын
@@0xOwenThurm v3
@patsarmiento5986
@patsarmiento5986 Жыл бұрын
Sad to say, my finding was invalidated regarding ethers not able to withdraw. 😢
@0xOwenThurm
@0xOwenThurm Жыл бұрын
😢It's always the worst when you find out that a finding is fake news haha -- but makes the real ones that much better!
@kamalchan9756
@kamalchan9756 Жыл бұрын
how to get job in your company ?
@0xOwenThurm
@0xOwenThurm Жыл бұрын
Join us in the lab and participate in the team audits we do in there!
Guide To Writing PoCs
32:19
Owen Thurm
Рет қаралды 1,3 М.
Here's My Plan | Where Web3 Security Is Going
32:42
Owen Thurm
Рет қаралды 3,1 М.
Who’s the Real Dad Doll Squid? Can You Guess in 60 Seconds? | Roblox 3D
00:34
Osman Kalyoncu Sonu Üzücü Saddest Videos Dream Engine 269 #shorts
00:26
5 Ways To Ship Smart Contracts Faster, Cheaper & More Secure
14:33
Getting started in security research - Kevin Backhouse
22:25
GitHub Education
Рет қаралды 8 М.
The 9 Keys To Developing Secure Smart Contracts
43:24
Owen Thurm
Рет қаралды 810
The Most Powerful Web3 Bug Bounty Tool Ever
39:19
Owen Thurm
Рет қаралды 2,7 М.
Find Bugs Like A Robot | Olympix
37:54
Owen Thurm
Рет қаралды 767
Become A 1000x Cyborg Auditor | Audit Wizard
53:44
Owen Thurm
Рет қаралды 2,2 М.
Pinata File Based Solutions: DIF Hackathon 2024
30:19
Decentralized Identity Foundation
Рет қаралды 38
The #1 Most Underrated Web3 Security Tool
36:14
Owen Thurm
Рет қаралды 2,4 М.
How To Get Bug Bounties At Scale | Glider By Hexens
1:22:49
Owen Thurm
Рет қаралды 1,3 М.
Introduction to Vulnerability Research
3:25
SheCanCode
Рет қаралды 580