The Hidden Danger in Financial Transactions
summary
A real breach story shows a wallet system where a race condition lets simultaneous withdrawals double‑spend funds, a Python stress script (a Python concurrent requests demo) extracts $1,000 from a $500 balance, and the incident scales to a >$70M loss with industry examples like Night Capital’s $440M hit. Investigation uses log analyzers and repro in a testbed, then fixes with DB transactions, double‑entry accounting, monitoring and row locks (SELECT ... FOR UPDATE) which stop the exploit.
AI-written summary · about
chapters (7)
- 0:00Introduction and Speaker Background
- 0:26Understanding Race Conditions
- 2:37Real-World Example of a Breach
- 3:30Steps to Mitigate Race Conditions
- 5:35Live Demonstration of Race Condition
- 11:14Implementing a Fix
- 16:29Conclusion and Key Takeaways
related talks
42mA Race To The Bottom: Database Transactions Undermining Your AppSec
49mAttacking and Defending Blockchains: From Horror Stories to Secure Wallets
49mAttacking and Defending Blockchains: From Horror Stories to Secure Wallets
43mOutsmarting Smart Contracts
40mBlockchain Security Guarantees and Exploits
57mWhat we can learn from the World's Biggest Heists
47mThe Heist: Chasing an Advanced Crypto Attacker Across the Multi-cloud
24mBitcoin Web Application Security