Unsafe Delegatecall (part 2) | Hack Solidity (0.6)

Поділитися
Вставка
  • Опубліковано 13 гру 2024

КОМЕНТАРІ • 29

  • @smartcontractprogrammer
    @smartcontractprogrammer  4 роки тому

    Vulnerability 0:13
    Contract vulnerable to unsafe delegatecall 0:50
    Challenge 2:30
    Code for the exploit 5:03
    Demo 12:13

  • @KingOfNeptune_
    @KingOfNeptune_ 3 роки тому +1

    You're one SNEAKY man, that code was some next level thing.

  • @adiadiadi131
    @adiadiadi131 3 роки тому +2

    Wow, I had to rewind and watch 9:17 3 times to digest it. Great and informative

    • @smartcontractprogrammer
      @smartcontractprogrammer  3 роки тому +1

      Play around on Remix to fully grasp how the hack works

    • @eeeeeeeeebatitupalkata6011
      @eeeeeeeeebatitupalkata6011 9 місяців тому +1

      @@smartcontractprogrammer i managed to do it on my own in 15 minutes, is that a good sign bro?

    • @eeeeeeeeebatitupalkata6011
      @eeeeeeeeebatitupalkata6011 9 місяців тому +1

      i only didnt come up with the msg.sender instead of address(this) for the address owner change, I used a hardcoded address@@smartcontractprogrammer

  • @JustHusband-rl8lv
    @JustHusband-rl8lv 4 роки тому +1

    Everything is perfectly explained!! We need more of these video's please!!

    • @zes7215
      @zes7215 2 роки тому

      no such thing as clevx or px or etc or not, cepuxyuax ,think, say any nmw s perfx

  • @bautistabaiocchi-lora1339
    @bautistabaiocchi-lora1339 2 роки тому

    this content is unmatched.

  • @salem232
    @salem232 4 роки тому +1

    ❤️ these two videos are awesome !!! Thanks so much !!!

  • @junghyunchoi4265
    @junghyunchoi4265 2 роки тому

    Is there a way to set msg.sender as the deployer of Attack contract?
    So the owner stores address of the deployer of Attack not, the address of Attack

  • @Ts2pc
    @Ts2pc 2 роки тому

    At 7:29 of the video, Why do you use the different ways( line31-36 vs. line 45-52) to call another function of contract ?

  • @SkemilArchive
    @SkemilArchive 2 роки тому

    How come we can paste an address in uint with *uint(uint160(address(this))))* ? I don't understand this process, Is the address getting formatted into something else?

  • @RobloxGamer-g9n
    @RobloxGamer-g9n 4 роки тому

    WoW!!! Thanks for this great tutorial

  • @Ts2pc
    @Ts2pc 2 роки тому

    At 9:34, line59, can we code: owner=address(this) instead of owner = msg.sender ?

    • @breakinggood-r2v
      @breakinggood-r2v Рік тому

      yes but in this series he said no to use becz of selfdestruct()

  • @sdfsfsfd437
    @sdfsfsfd437 4 роки тому

    many thanks for all your videos, muchas gracias.

  • @BarziniNwa
    @BarziniNwa 2 роки тому

    simple and easy, thank you.

  • @from2ureview251
    @from2ureview251 3 роки тому +1

    ❤️

  • @mo_i_nas
    @mo_i_nas 3 роки тому +1

    Is this still the case with new Solidity versions? like 0.8.x ? I'm no genius, but this seems like bad design

  • @INDIADAINDIAN
    @INDIADAINDIAN 2 роки тому

    Hey brother can you help me my account hacked by some one he deployed auto transfer bot

  • @janinduabeywickrama2820
    @janinduabeywickrama2820 Рік тому

    Brother how can we mitigate this problem ? i mean can we use proxy contract for mitigate this?

  • @mukeshjaiswal3106
    @mukeshjaiswal3106 3 роки тому

    great video

  • @terrywindwalker5397
    @terrywindwalker5397 2 роки тому

    In case 0.8+ is used, would this still work for changing the contract owner? I think they have a built-in ownerOnly modifier.

  • @eren186
    @eren186 4 роки тому

    Sorry about that