How to steal Ethers: scanning for vulnerable contracts

#1

Post by palkeo » Fri, Dec 07, 2018, 11:42 PM UTC

How to steal Ethers: scanning for vulnerable contracts
palkeo.com

Re: How to steal Ethers: scanning for vulnerable contracts

#2

Post by kolinko » Fri, Dec 07, 2018, 11:59 PM UTC

Oh nice, and I just published "Show HN" with my symbolic execution decompiler - http://www.eveem.org/

Seems like there will be a big trend with all kinds of symbolic execution tools showing up in the upcoming year :)

Re: How to steal Ethers: scanning for vulnerable contracts

#3

Post by palkeo » Sat, Dec 08, 2018, 12:00 AM UTC

kolinko wrote: post #2

Oh nice, and I just published "Show HN" with my symbolic execution decompiler - http://www.eveem.org/ Seems like there will be a big trend with all kinds of symbolic execution tools showing up in the upcoming year :)

I link to eveem in my article. I used it quite a lot for my investigation :) Thanks for your great tool!

Re: How to steal Ethers: scanning for vulnerable contracts

#4

Post by [deleted] » Sat, Dec 08, 2018, 6:24 AM UTC

[deleted]

Re: How to steal Ethers: scanning for vulnerable contracts

#5

Post by wslh » Sat, Dec 08, 2018, 9:54 AM UTC

palkeo wrote: post #3

kolinko wrote: post #2

Oh nice, and I just published "Show HN" with my symbolic execution decompiler - http://www.eveem.org/ Seems like there will be a big trend with all kinds of symbolic execution tools showing up in the upcoming year :)

I link to eveem in my article. I used it quite a lot for my investigation :) Thanks for your great tool!

By coincidence we just published an article [1] comparing automated tools to human auditing in smart contracts. I am reviewing your article for expanding ours. At ethdev[2] someone suggested to check the Slither[3] tool also.

[1] https://blog.coinfabrik.com/smart-contract-auditing-human-vs...

[2] https://www.reddit.com/r/ethdev/comments/a4492r/comment/ebbn...

[3] https://github.com/trailofbits/slither

Re: How to steal Ethers: scanning for vulnerable contracts

#6

Post by rienbdj » Sat, Dec 08, 2018, 12:07 PM UTC

have we finally found a way to monetize PL research?

Re: How to steal Ethers: scanning for vulnerable contracts

#7

Post by tempodox » Sat, Dec 08, 2018, 12:42 PM UTC

Isn't that potentially life-threatening because there's a good chance of stealing from criminals?

Re: How to steal Ethers: scanning for vulnerable contracts

#8

Post by Grangar » Sat, Dec 08, 2018, 1:04 PM UTC

tempodox wrote: post #7

Isn't that potentially life-threatening because there's a good chance of stealing from criminals?

How would they go about figuring out who did it though? Can't really involve law enforcement in that.

Re: How to steal Ethers: scanning for vulnerable contracts

#9

Post by bouncycastle » Sat, Dec 08, 2018, 1:15 PM UTC

Be careful! There was once a guy who tried to hack an Ethereum smart contract, but in the end the contract hacked him instead: https://techcrunch.com/2018/02/16/clever-ethereum-honeypot-l...

Re: How to steal Ethers: scanning for vulnerable contracts

#10

Post by jstanley » Sat, Dec 08, 2018, 1:49 PM UTC

bouncycastle wrote: post #9

Be careful! There was once a guy who tried to hack an Ethereum smart contract, but in the end the contract hacked him instead: https://techcrunch.com/2018/02/16/clever-ethereum-honeypot-l...

Non-GDPR-walled link: http://web.archive.org/web/20180301075711/https://techcrunch...