All your Ether are belong to us (a.k.a Hacking Ethereum-based DApps)

on YouTube ↗46m

" summary

Live demos use Remix + local Ethereum node and Metamask to show concrete failures: a public transaction reveals a player's secret bid, an integer overflow buys millions of tokens for <0.5 ether, and a reentrancy exploit drains an entire DAO via a fallback loop. Code examples show Solidity versions, safe-math libraries, and a nonce/signing flow; remediations include encrypting off-chain secrets, upgrading to Solidity >=0.8, and applying check-effects-interactions plus a reentrancy lock.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 1:17Blockchain 101
3. 5:55A gentle introduction to smart contracts
4. 18:22Fun tine: Hacking DApps! Unencrypted private data (SWC-136)
5. 42:51Final thoughts

" related talks

• 26mAll your Ether belong to us (Hacking Ethereum-based DApps)L. Q. Gonzales · OWASP 20th Anniversary 2021
• 43mOutsmarting Smart ContractsDamian Rusinek · OWASP AppSec Europe 2018
• 12mSmart Contract SecurityChristoph Jentzsch · Devcon 2
• 27mUnderhanded Solidity Contest Winner PresentationsSantiago Palladino, Tynan Richards, Michael Zhu · Solidity Summit 2022
• 25mCommSec D2 - Smart Contract (In)SecurityBen Schmidt · Hack In The Box Amsterdam 2018
• 42mBuilding Full-Stack dAppsNader Dabit · Infobip Shift 2021
• 48mD1T2 - Smashing Ethereum Smart Contracts for Fun and ACTUAL ProfitBernhard Mueller · Hack In The Box Amsterdam 2018
• 49mHacked Blockchain Projects What we’ve learnedIvan Liljeqvist · Build Stuff 2017