How Decompilation Uncovers Smart Contract Vulnerabilities
summary
Decompilation plus declarative static program analysis (Datalog) reconstructs functions, variables and control flow from EVM bytecode and enables scalable queries across every deployed contract; a custom decompiler and symbolic proofs surface concrete exploits such as a CVE in Uniswap, two Solidity compiler bugs, and a Multichain bridge vulnerability affecting >$1B liquidity. Pattern searches then find variants of a malicious proxy that could drain funds, a cluster that would have netted attackers >$10M.
AI-written summary · about
chapters (8)
- 0:00Decompilation and security
- 3:42Smart contracts to bytecode
- 7:13Recovering structure from bytecode
- 10:12Decompilers for vulnerabilities
- 13:16Static analysis for upgrades
- 15:29Malicious proxy vulnerability
- 20:43Finding malicious proxies
- 21:13Conclusion
related talks
01h 31mHow to find Solidity vulnerabilities
10mHow to Understand a Smart Contract Hack
01h 10mHow Context-Sensitive Static Analysis Led to the Best Smart Contract Decompiler
20mBillion Dollar Bugs
14mHybrid Attack Synthesis for DeFi
13mAdvances in Automated Smart Contract Vulnerability
51mA Deal with the Devil: Breaking Smart Contracts
23mThanks for all the bugs!