sub0 2024 - Nihat Alpcan Onaran (Analog)
summary
Covers concrete Substrate failures: integer wrapping and precision loss that miscalculate token vesting, a casting to u32 bug that lets oversized hashes reset weight and exhaust storage, nested vectors that bypass weight checks by counting only the outer vec and enable memory/CPU DOS, missing deletion of old NFD metadata that causes storage growth, and signature-hash collisions from concatenated fields without delimiters. Describes using hong fuz for coverage-guided fuzzing to find runtime panics and allocation crashes, and remediation: bounded vectors, delimiters, recoverable errors, dynamic weight benchmarks, and storage deposits.
AI-written summary · about
chapters (16)
- 0:00Substrate security challenges
- 1:12Speaker and talk overview
- 1:55Integer vulnerabilities in Rust
- 3:01Real-world integer overflows
- 4:26Weight discrepancies in Substrate
- 5:29Storage exhaustion vulnerabilities
- 8:20Runtime panics in Substrate
- 10:30Storage cleanup strategies
- 11:53Insecure signatures and replay attacks
- 14:02Hash collision vulnerabilities
- 16:13Out of memory issues
- 18:43Cross-chain messaging risks
- 20:30Insecure randomness and crates
- 21:12Fuzzing for security
- 22:38Fuzzing setup for Substrate
- 24:46Q&A on weights and memory
related talks
01h 16mClassic Vulnerabilities
18mFavorite DeFi Vulnerabilities
44mHands Off and Putting SLAB/SLUB Feng Shui in a Blackbox
20mSolidity's most common security pitfalls and its best safeguards
43mThe Aftermath of a Fuzz Run: What to do about those Crashes?
25mCommSec D2 - Smart Contract (In)Security
35mOS Security Is Hard: Why All the Fuzzers in the World Won't Change the Way...
01h 05mClassic Vulnerabilities