A practical example on how to perform sandwich attacks on Ethereum - libevm/subway

I built a tool to help detect and defend against "metamorphic smart contracts," mutable blockchain code that poses a risk to web3 users.

A checklist of things to look for when auditing Solidity smart contracts. - GitHub - tamjid0x01/SmartContracts-audit-checklist: A checklist of things to look for when auditing Solidity smart contr...

Ethereum has been attracting lots of attacks, hence there is a pressing need to perform
timely investigation and detect more attack instances. However, existing systems suffer
from the scalability issue due to the following reasons. First, the tight ...

Smart contracts are programs deployed on a blockchain. They are executed for a monetary
fee paid in gas—a clear optimization target for smart contract compilers. Because smart contracts
are a young, fast-moving field without (manually) fine-tuned ...

I built a tool to help detect and defend against "metamorphic smart contracts," mutable blockchain code that poses a risk to web3 users.

Out-of-gas errors occur when smart contract programs are provided with inputs that
cause excessive gas consumption and which will be easily exploited to perform DoS
attacks. Various approaches have been proposed to estimate the gas limit of a function
in…

Ignite CLI offers everything you need to build, test, and launch your blockchain with a decentralized worldwide community. Ignite CLI is built on top of Cosmos SDK, the world’s most popular blockchain framework. Ignite CLI accelerates chain development by…

Fuzz testing (fuzzing) has witnessed its prosperity in detecting security flaws recently.
It generates a large number of test cases and monitors the executions for defects.
Fuzzing has detected thousands of bugs and vulnerabilities in various ...

TLDR: There exist a financial incentive for the execution payload to be proposed later than the anticipated time window for it. We worry that this might lead to favoring larger validators, encourag...

Full Course: https://academy.tcm-sec.com/p/practical-ethical-hacking-the-complete-course
All Course Resources/Links: https://github.com/Gr1mmie/Practical-Ethical-Hacking-Resources

A shout out to all those involved with helping out on this course:

Alek …

The easiest way to work with NFT Data

In this article, you'll understand phishing analysis. A phishing attack is a type of attack aimed at stealing personal data

Blockchain technology has been widely used in digital currency, Internet of Things, and other important fields because of its decentralization, nontampering, and anonymity. The vigorous development of blockchain cannot be separated from the security guarantee.…