Web Apps vs Blockchain DApps (Smart Contracts): Tools, Vulns And Standards
summary
Compares concrete failure modes and fixes rather than high-level history: common exploits include reentrancy, unbounded loops/gas exhaustion, unchecked lowlevel calls, predictable randomness and uninitialized contracts; mitigation examples include SafeMath, centralized simple access-control contracts, withdraw-patterns, stop/upgrade mechanisms, and formal verification; tooling cited is Truffle and Remix plus automatic scanners and formal verification workflows; claims a practical checklist — 13 categories ~100 requirements — to fill the ASVS gap and plans to publish on GitHub Oct 1
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:28What are DApps
- 4:51Are DApps secure
- 8:45Security Verification Standard
- 10:10Analysis
- 16:32Design
- 20:50Implementation
- 25:50Testing
- 28:32Deployment
- 32:05Maintenance
related talks
51mA Deal with the Devil: Breaking Smart Contracts
52mThe Power Of DevSecOps In Web3 And Blockchain
20mLearning How to Build Secure Smart Contracts- 20mLearning How to Build Secure Smart Contracts
24mBitcoin Web Application Security
36mWhich Web Vulnerabilities Are Especially Dangerous in Blockchain?
43mOutsmarting Smart Contracts
12mSmart Contract Security