https://github.com/kadenzipfel/smart-contract-vulnerabilities

A collection of smart contract vulnerabilities along with prevention methods
https://github.com/kadenzipfel/smart-contract-vulnerabilities

blockchain ethereum security solidity

Last synced: 23 days ago
JSON representation

A collection of smart contract vulnerabilities along with prevention methods

• Host: GitHub
• URL: https://github.com/kadenzipfel/smart-contract-vulnerabilities
• Owner: kadenzipfel
• Created: 2019-10-16T17:41:22.000Z (about 5 years ago)
• Default Branch: master
• Last Pushed: 2024-07-28T20:38:51.000Z (3 months ago)
• Last Synced: 2024-08-02T10:19:33.664Z (3 months ago)
• Topics: blockchain, ethereum, security, solidity
• Homepage: https://kadenzipfel.github.io/smart-contract-vulnerabilities/
• Size: 2.03 MB
• Stars: 1,642
• Watchers: 37
• Forks: 223
• Open Issues: 27
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-blockchain-testing - smart-contract-vulnerabilities

README

        
# Smart Contract Vulnerabilities

- [Insufficient Gas Griefing](./vulnerabilities/insufficient-gas-griefing.md)

- [Reentrancy](./vulnerabilities/reentrancy.md)

- [Integer Overflow and Underflow](./vulnerabilities/overflow-underflow.md)

- [Timestamp Dependence](./vulnerabilities/timestamp-dependence.md)

- [Authorization Through tx.origin](./vulnerabilities/authorization-txorigin.md)

- [Floating Pragma](./vulnerabilities/floating-pragma.md)

- [Outdated Compiler Version](./vulnerabilities/outdated-compiler-version.md)

- [Unsafe Low-Level Call](./vulnerabilities/unsafe-low-level-call.md)

- [Unchecked Return Value](./vulnerabilities/unchecked-return-values.md)

- [Unsupported Opcodes](./vulnerabilities/unsupported-opcodes.md)

- [Uninitialized Storage Pointer](./vulnerabilities/uninitialized-storage-pointer.md)

- [Assert Violation](./vulnerabilities/assert-violation.md)

- [Use of Deprecated Functions](./vulnerabilities/use-of-deprecated-functions.md)

- [Delegatecall to Untrusted Callee](./vulnerabilities/delegatecall-untrusted-callee.md)

- [Signature Malleability](./vulnerabilities/signature-malleability.md)

- [Incorrect Constructor Name](./vulnerabilities/incorrect-constructor.md)

- [Shadowing State Variables](./vulnerabilities/shadowing-state-variables.md)

- [Weak Sources of Randomness from Chain Attributes](./vulnerabilities/weak-sources-randomness.md)

- [Missing Protection against Signature Replay Attacks](./vulnerabilities/missing-protection-signature-replay.md)

- [Requirement Validation](./vulnerabilities/requirement-violation.md)

- [Write to Arbitrary Storage Location](./vulnerabilities/arbitrary-storage-location.md)

- [Hash Collision when using abi.encodePacked() with Multiple Variable-Length Arguments](./vulnerabilities/hash-collision.md)

- [Incorrect Inheritance Order](./vulnerabilities/incorrect-inheritance-order.md)

- [Presence of Unused Variables](./vulnerabilities/unused-variables.md)

- [Unencrypted Private Data On-Chain](./vulnerabilities/unencrypted-private-data-on-chain.md)

- [Inadherence to Standards](./vulnerabilities/inadherence-to-standards.md)

- [Asserting Contract from Code Size](./vulnerabilities/asserting-contract-from-code-size.md)

- [Transaction-Ordering Dependence](./vulnerabilities/transaction-ordering-dependence.md)

- [DoS with Block Gas Limit](./vulnerabilities/dos-gas-limit.md)

- [DoS with (Unexpected) revert](./vulnerabilities/dos-revert.md)

- [Unexpected `ecrecover` null address](./vulnerabilities/unexpected-ecrecover-null-address.md)

- [Default Visibility](./vulnerabilities/default-visibility.md)

- [Insufficient Access Control](./vulnerabilities/insufficient-access-control.md)

- [Off-By-One](./vulnerabilities/off-by-one.md)

- [Lack of Precision](./vulnerabilities/lack-of-precision.md)

- [Unbounded Return Data](./vulnerabilities/unbounded-return-data.md)

- [Using ``msg.value`` in a Loop](./vulnerabilities/msgvalue-loop.md)

- [Deleting a Mapping Within a Struct](./vulnerabilities/mapping-within-struct.md)