7 Phases of Smart Contract Hacking
Presents a structured seven-phase methodology for auditing and attacking smart contracts, from reconnaissance to post-exploitation.
Summary
A smart contract security auditor presents a structured seven-phase methodology for evaluating, auditing, and exploiting decentralized applications on the Ethereum blockchain in the Blockchain Village [05:57]. The speaker emphasizes that smart contracts must be approached as autonomous, immutable software systems where standard post-deployment patch paradigms do not apply.
The presentation details each audit phase, contrasting automated static analysis tools with rigorous manual business logic verification to detect subtle algorithmic vulnerabilities [12:07, 12:15]. The speaker explores prominent attack classes—including reentrancy flaws, integer overflows, authorization bypasses, and front-running risks exacerbated by network congestion and mempool manipulation [18:23, 24:22]—providing actionable guidelines for developers to write defensive Solidity code and conduct thorough pre-deployment audits [30:32].
(AI summary — Gemini Flash)
Related talks
OWASP Foundation·52 min
Industry experts analyze emerging threats surrounding APPSEC Cali 2018 -Predicting Random Numbers in Ethereum Smart Contracts.
Main Stage·48 min
Bernhard Mueller
Analyzes the adversarial ecosystem of Ethereum smart contract exploits and counter-exploits, including honeypot contracts designed to trap attackers.
RSAC Cybersecurity·25 min
Analysts investigate attack surfaces and defenses concerning Foundations of Bitcoin, Blockchain and Smart Contracts: Beginner's Guide to Ethereum, Tokens, an....