All your Ether belong to us (Hacking Ethereum-based DApps)
summary
Live demos deploy Solidity contracts to a local test chain via Remix and Web3 (v3.js) with MetaMask and successfully exploit them. The talk shows calldata reveals secrets by reading transaction arguments on-chain, and demonstrates an integer overflow mints 2^256 tokens for <0.5 ETH attack that inflates balances. It explains the exact vulnerable code patterns, how transactions expose inputs, the gas/transaction steps used, and practical remediations (use SafeMath or Solidity >=0.8 and store secrets off‑chain).
AI-written summary · about
chapters (7)
- 0:00Intro
- 1:07Blockchain 101
- 4:51Smart Contracts
- 9:06DApps
- 14:45How to hack DApps
- 19:21Integral Overflow
- 24:45Final Thoughts
related talks
46mAll your Ether are belong to us (a.k.a Hacking Ethereum-based DApps)
43mOutsmarting Smart Contracts
48mD1T2 - Smashing Ethereum Smart Contracts for Fun and ACTUAL Profit
25mCommSec D2 - Smart Contract (In)Security
27mUnderhanded Solidity Contest Winner Presentations
10mHow to Understand a Smart Contract Hack
51mA Deal with the Devil: Breaking Smart Contracts
12mSmart Contract Security