Blockchain Vulnerabilities in Practice

被引:7
作者
Amiet, Nils [1 ]
机构
[1] Kudelski Secur, Route Geneve 22-24, CH-1033 Cheseaux Sur Lausanne, Switzerland
来源
DIGITAL THREATS: RESEARCH AND PRACTICE | 2021年 / 2卷 / 02期
关键词
Blockchain; security; smart contracts; ethereum;
D O I
10.1145/3407230
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Blockchains are not invulnerable. There are known vulnerabilities in various blockchain ecosystem components. This field note describes some vulnerabilities observed in smart contracts and node software, their exploitation, and how to avoid them, with a focus on the Ethereum ecosystem.
引用
收藏
页数:7
相关论文
共 67 条
  • [1] Algorand, 2018, Algorand
  • [2] Alkhalifah Ayman, 2019, A Taxonomy of Blockchain Threats and Vulnerabilities, DOI [10.20944/preprints201909.0117.v1, DOI 10.20944/PREPRINTS201909.0117.V1]
  • [3] ARM Limited, 2009, mbed TLS
  • [4] Aumasson J. P., 2018, Blockchains: How to Steal Millions in 2**64 Operations
  • [5] Banisadr Eric, 2018, How 800k Evaporated from the PoWH Coin Ponzi Scheme Overnight
  • [6] Bernstein Daniel J., 2011, Report 2011/368
  • [7] Bitpay, 2016, Bitpay
  • [8] Bleichenbacher Daniel, 2000, Generating ElGamal signatures without knowing the secret key
  • [9] Bogatyy Ivan, 2017, Implementing Ethereum trading front-runs on the Bancor exchange in Python
  • [10] Biased Nonce Sense: Lattice Attacks Against Weak ECDSA Signatures in Cryptocurrencies
    Breitner, Joachim
    Heninger, Nadia
    [J]. FINANCIAL CRYPTOGRAPHY AND DATA SECURITY, FC 2019, 2019, 11598 : 3 - 20