https://github.com/0xkoda/verifi-web

Using smart contracts to verify the content of a webpage, mitigating the risk of connecting a wallet to a website affected by a DNS takeover.
https://github.com/0xkoda/verifi-web

Last synced: 9 days ago
JSON representation

Using smart contracts to verify the content of a webpage, mitigating the risk of connecting a wallet to a website affected by a DNS takeover.

• Host: GitHub
• URL: https://github.com/0xkoda/verifi-web
• Owner: 0xKoda
• Created: 2023-12-02T04:51:04.000Z (12 months ago)
• Default Branch: main
• Last Pushed: 2023-12-07T05:17:50.000Z (12 months ago)
• Last Synced: 2023-12-07T23:22:38.181Z (12 months ago)
• Language: Solidity
• Homepage:
• Size: 7.81 KB
• Stars: 2
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: readme.md

Awesome Lists containing this project

README

        
# URL Hash Storage Contract

## Overview

Too many web2 security issues still affect web3. Recently, DNS takeovers have been in the spotlight with velodrome and aerodrome incidents. This repository contains a Solidity smart contract designed to securely store and verify MD5 hashes of websites. In the DeFi space, DNS takeovers pose a significant threat, often leading to users interacting with malicious webpages and potentially losing funds. By storing MD5 hashes of webpages on chain, we create a provable and immutable record that helps when verifying if a webpage is the same as the one deployed by the protocol owner.

For Example: 

During the Velodrome incident, the MD5 = 0597d6b768c447f87d43ac8bff96bdaf.

When velodrome regained control, the MD5 = ab479bd6a07b57895e9a252b3f90cc8f.

## Getting Started 

```sh

git clone https://github.com/0xkoda/verifi-web.git

cd verifi-web

```

### Run Tests

```sh

forge test

```

## Contributions 

Feel free to contribute.

## ⚠️ Warning 

This is a POC and should not be used in production.