Inside Smart Contract Hacks: Attacker vs Auditor Mindset скачать в хорошем качестве

Inside Smart Contract Hacks: Attacker vs Auditor Mindset

https://x.com/opensensepw https://x.com/zokyo_io This workshop shows how vulnerabilities in smart contracts work from both sides. You see how an attacker thinks when finding weaknesses and how an auditor should think to detect and fix them. The session includes proofs of concept, bridge mechanics, token transfer exploits, invariants, LiquidRon protocol issues, share mismatches, fee flows, and signature related attacks. Timestamps 00:00 Intro 00:34 The main purpose of the workshop 03:08 First example 06:22 How vulnerability work 07:04 What is Bridge 09:22 Transfer token to yourself 11:15 Proof of Concept 13:53 What is Invariant? 14:57 Second vulnerability 16:22 LiquidRon Protocol 18:01 The amount of share is not 100% equal to amount of token 20:45 How the fee is paid to external actor 23:15 Vulnerability analysis step by step 28:46 How the vulnerability can be solve? 31:17 execute Proof of Concept 32:25 Fix the vulnerability 34:15 Signature related attcks