You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Besides the bug targeted by the NameServiceBank challenge, there is another logical flaw in the NAME_SERVICE_BANK contract that allows an attacker to steal the funds of a user whose username was set with a non-zero obfuscation degree. This logical bug is independent of the Solidity version, meaning the vulnerability exists regardless of the compiler used. It could be interesting to create a new NameServiceBank2 challenge that exploits this specific bug.
I can discuss the details offline.
The text was updated successfully, but these errors were encountered:
Besides the bug targeted by the
NameServiceBank
challenge, there is another logical flaw in theNAME_SERVICE_BANK
contract that allows an attacker to steal the funds of a user whose username was set with a non-zero obfuscation degree. This logical bug is independent of the Solidity version, meaning the vulnerability exists regardless of the compiler used. It could be interesting to create a newNameServiceBank2
challenge that exploits this specific bug.I can discuss the details offline.
The text was updated successfully, but these errors were encountered: