Cream Finance was hacked again on 27th October 2021. Likely for the final time. The attacker stole $130m+ worth of assets from Cream’s lending protocol. The attack was executed over multiple transactions due to block gas limits, but the bulk of it happened in this transaction. This was one of the most sophisticated and cleanly …
Creamed Cream – Learn the Secret Recipe (Cream Hack Analysis) Read More »
I will do live security reviews of Ethereum smart contracts and share my approach to auditing on a stream. The live stream is scheduled to start at 3.30 PM GMT on Sunday (22/08/2021). Link: https://www.youtube.com/watch?v=LLiJK_VeAvQ Notes Here are some brief notes that I’ll use as talking points on the stream. A detailed blog post will …
The Bug The DutchAuction smart contract inherits the BoringBatchable utility contract that allows callers to batch different calls together. There is a commitEth function in the auction contract that uses msg.value to know the amount of ETH commited by the user. If the user commits more ETH than the contract’s capacity, the contract refunds the …
A peek inside the MISO war room – $350m incident response story Read More »
On 10th August 2021, Poly Network suffered from a hack that caused a loss of over 600 million dollars. The hack happened across multiple blockchains including Ethereum, Binance Smart Chain, and Polygon. This is the largest crypto hack yet. Poly Network is a Blockchain interoperability project that allows people to send transactions across blockchains. One …
Poly Network Hack Analysis – Largest Crypto Hack Read More »
This is the story of a simple bug in the FRAME runtime of Parity’s Substrate blockchain framework. The bug allowed attackers to do infinitely large transactions without paying any extra fees. The vulnerability was the result of a buggy implementation of fee calculation in the FRAME runtime of Substrate. By exploiting this vulnerability, an attacker …
Free blockchain storage – Tale of a bug in Substrate’s FRAME runtime Read More »
Syncing an Ethereum full node has become painfully slow as the size of a full node folder has increased to over 130 GB and is continually increasing. Optimizing your configuration can save you hours or even days of sync times. I had to sync a few nodes a couple of weeks back, so I started tuning …
Optimal Parity Config for Syncing an Ethereum full node quickly Read More »
Blockchain offers an innovative solution for introducing trust in a trustless environment. Blockchains and the features they bring have innumerable applications, but most of them cannot be implemented in the current generation of blockchains due to the scalability issues. To compare with real numbers, VISA processes about 2000 transactions per second while ethereum can only …
About Me Allow me to start by telling a bit about myself. I began developing websites when I was in high school, I have now completed my Undergrad in Computer Science, Although over the course of time, My interests have shifted from web development to Security and Distributed Computing. Blockchain is one field where both …