Back to The Future: What Bugs You Can Expect in Your Project
summary
Halborn builds a blockchain vulnerability scoring system by extending CVSS with exploitability (attack origin, cost, complexity) and impact (CIA triad, deposit, yield, reversibility, scope). Analysis shows 1 in 5 vulnerabilities affects deposits, and when deposits are hit losses are often severe (roughly 80% of the deposit value); yield is less often affected but can be devastating. Common root causes include account owner check missing, unchecked CPIs/PDA signature hijacking, account type confusion, and unvalidated remaining accounts in Anchor.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:48Vulnerability scoring limits
- 6:03Blockchain scoring system
- 10:01Common vulnerability impacts
- 12:59Vulnerability characteristics
- 15:09Solana vulnerabilities
- 20:14Summary
related talks
18mFavorite DeFi Vulnerabilities
15mKeynote
36mDeciphering Web3 Security: Implications and Innovations
39mCVE 101: The Unfolding Of A Zero Day Attack
53mVulnerabilities Are Ingredients And OWASP Top 10 The Seasoning- Meghan Jacquot
58mWhy Can't We All Just Get Along? Bridging the Gap in Vulnerability Prioritization Standards
33m40,000 CVEs and Counting: What 60 Years of AppSec Tells Us About 2026
30mBeyond Quick Cash: Rethinking Bug Bounties for...