Smart Contracts PentestingSmart Contract Vulnerabilities
EVM Attack Surfaces
- Access Control
- Arithmetic & Logic
- Storage & Memory
- External Call
Dynamic Array UnderflowSCWE-124: Write to Arbitrary Storage LocationHash Collisions (abi.encodePacked)SCWE-074: Hash Collisions with Multiple Variable Length ArgumentsInsecure DelegateCallSCWE-035: Insecure Delegatecall UsageInteger overflow/underflowSCWE-047: Integer Overflows and UnderflowsReentrancySCWE-046: Reentrancy AttacksSensitive Data ExposureSCWE-044: Insecure Use of StorageSolidity Metadata Exposure