sub0 Asia 2024 - Mohammadreza Ashouri
summary
Covers concrete Rust+Substrate failures and fixes: a 2020 scan finds many crates contain unsafe blocks leading to memory bugs; common chain bugs include predictable randomness (use VRF), storage-bloat DoS, overflow/underflow from release-mode wrapping (use checked_add/checked_sub), unsafe downcasts, replayable transactions, and outdated dependencies. Recommends unit tests, fuzzing, manual review and CLI tools like cargo-audit, Clippy and cargo-geiger to find vulnerable crates and unsafe blocks, and keeping consistent, up-to-date versions.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:11Rust security model
- 3:49Borrow checker examples
- 5:55Limitations of Rust
- 10:33Safety challenges
- 11:40Tools for security
- 18:35Substrate vulnerabilities
related talks
45mBuilding Safe and Secure Systems in Rust
19mCounterexamples in Safe Rust
35mAn intro to the world of auditing Rust code
50mCrate security in 2025
50mSmashing the Stack: Let’s Make It Less Fun And Unprofitable!
14mAn Empirical Study of Bugs in the rustc Compiler
20mrust-vmm: A Security Journey
50mConfessions of a Rusty Java developer