teEther: Gnawing at Ethereum to Automatically Exploit Smart Contracts
summary
The paper defines what makes an Ethereum smart contract vulnerable and presents teEther, a tool that takes only a contract's EVM bytecode and automatically finds vulnerabilities and generates exploits. teEther analyzes bytecode to identify exploitable patterns in transaction-processing logic and produces concrete attack transactions that extract or manipulate funds.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:05Smart contract risks
- 3:20Analyzing vulnerabilities
- 6:30Memory and storage
- 9:08Execution and state changes
- 12:00Data validation
- 15:08Exploiting contracts with teEther
- 18:24Case studies
- 21:34Demo of teEther
- 23:41Summary and Q&A
related talks
31mEthainter: A Smart Contract Security Analyzer for Composite Vulnerabilities
48mD1T2 - Smashing Ethereum Smart Contracts for Fun and ACTUAL Profit
10mHow to Understand a Smart Contract Hack
13mAdvances in Automated Smart Contract Vulnerability
26mAll your Ether belong to us (Hacking Ethereum-based DApps)
51mA Deal with the Devil: Breaking Smart Contracts
25mCommSec D2 - Smart Contract (In)Security
43mOutsmarting Smart Contracts