Unsafe Delegatecall (part 2) | Hack Solidity (0.6)

[@smartcontractprogrammer]

Vulnerability 0:13 Contract vulnerable to unsafe delegatecall 0:50 Challenge 2:30 Code for the exploit 5:03 Demo 12:13

[@adiadiadi131]

Wow, I had to rewind and watch 9:17 3 times to digest it. Great and informative

[@smartcontractprogrammer]

Play around on Remix to fully grasp how the hack works

[@eeeeeeeeebatitupalkata6011]

@@smartcontractprogrammer i managed to do it on my own in 15 minutes, is that a good sign bro?

[@eeeeeeeeebatitupalkata6011]

i only didnt come up with the msg.sender instead of address(this) for the address owner change, I used a hardcoded address@@smartcontractprogrammer

[@KingOfNeptune_]

You're one SNEAKY man, that code was some next level thing.

[@Randomness-rl8lv]

Everything is perfectly explained!! We need more of these video's please!!

[@zes7215]

no such thing as clevx or px or etc or not, cepuxyuax ,think, say any nmw s perfx

[@bautistabaiocchi-lora1339]

this content is unmatched.

[@Ts2pc]

At 7:29 of the video, Why do you use the different ways( line31-36 vs. line 45-52) to call another function of contract ?

[@salem232]

❤️ these two videos are awesome !!! Thanks so much !!!

[@junghyunchoi4265]

Is there a way to set msg.sender as the deployer of Attack contract? So the owner stores address of the deployer of Attack not, the address of Attack

[@SkemilArchive]

How come we can paste an address in uint with *uint(uint160(address(this))))* ? I don't understand this process, Is the address getting formatted into something else?

[@Ts2pc]

At 9:34, line59, can we code: owner=address(this) instead of owner = msg.sender ?

[@breakinggood-r2v]

yes but in this series he said no to use becz of selfdestruct()

[@sdfsfsfd437]

many thanks for all your videos, muchas gracias.

[@janinduabeywickrama2820]

Brother how can we mitigate this problem ? i mean can we use proxy contract for mitigate this?

[@smartcontractprogrammer]

no, only defense is to review code before calling

[@INDIADAINDIAN]

Hey brother can you help me my account hacked by some one he deployed auto transfer bot

[@RobloxGamer-g9n]

WoW!!! Thanks for this great tutorial

[@mo_i_nas]

Is this still the case with new Solidity versions? like 0.8.x ? I'm no genius, but this seems like bad design

[@smartcontractprogrammer]

yes

[@BarziniNwa]

simple and easy, thank you.

[@from2ureview251]

❤️

[@terrywindwalker5397]

In case 0.8+ is used, would this still work for changing the contract owner? I think they have a built-in ownerOnly modifier.

[@mukeshjaiswal3106]

great video

[@Kenpachi96]

Sorry about that

[@smartcontractprogrammer]

Sorry I don't understand your question:(