A Smart Contract is a self-executing contract with the terms of the agreement directly written into code. These contracts run on a blockchain, automatically executing actions when predefined conditions are met. They facilitate, verify, and enforce the negotiation or performance of a contract without the need for intermediaries.
Context
Smart Contracts are foundational to decentralized applications (dApps) and decentralized finance (DeFi), with current discussions focusing on their security, upgradeability, and the development of more sophisticated functionalities. Analysts are examining the impact of new smart contract languages, audit methodologies, and the increasing complexity of on-chain logic on the security and utility of the blockchain ecosystem.
A delegateCall vulnerability in UXLINK's multi-signature wallet allowed attackers to seize control, mint tokens, and drain $11.3 million in assets, highlighting critical governance and key management flaws.
A critical flaw in a newly deployed ERC4626 vault's exchange rate calculation allowed an attacker to drain $9.8 million by manipulating perceived collateral value.
A critical validation flaw in Arcadia Finance's Rebalancer contract enabled an attacker to hijack asset management, leading to a multi-million dollar fund drain.
A compromised cross-chain bridge contract allowed unauthorized token minting and liquidity draining, posing a critical risk to asset integrity across interconnected blockchain ecosystems.
A new consensus mechanism integrates verifiable randomness via novel PRNGs and smart contracts, ensuring unbiased validator selection and bolstering blockchain integrity.
A subtle rounding error in a Uniswap v4-based DEX's withdraw function, when combined with flash loan and sandwich attacks, enabled disproportionate liquidity draining.
A reentrancy vulnerability, introduced during a prior patch, allowed an attacker to manipulate price oracle logic and drain $42 million from GMX V1 liquidity pools.
A `delegateCall` vulnerability in UXLINK's multi-signature wallet enabled unauthorized administrative control, leading to asset exfiltration and arbitrary token minting, underscoring critical smart contract design and access control failures.
A critical flaw in Infini's smart contract administration enabled an insider to drain $49.5 million, exposing the severe risks of unchecked system privileges.
A compromised administrative private key enabled unauthorized contract upgrades, leading to significant asset drain and highlighting critical key management failures.
A critical vulnerability stemming from unaudited code and single-signature deployment enabled a $2.59 million state manipulation attack on the Sui-based Nemo Protocol.
A critical flaw in the protocol's price oracle and transfer logic enabled a flash loan attack, compromising $2 million and devaluing the NGP token by 88%.
A single compromised private key enabled a malicious smart contract upgrade, allowing an attacker to drain $8.4 million from the Zoth real-world asset restaking protocol.
We use cookies to personalize content and marketing, and to analyze our traffic. This helps us maintain the quality of our free resources. manage your preferences below.
Detailed Cookie Preferences
This helps support our free resources through personalized marketing efforts and promotions.
Analytics cookies help us understand how visitors interact with our website, improving user experience and website performance.
Personalization cookies enable us to customize the content and features of our site based on your interactions, offering a more tailored experience.
