The Ultimate Guide To Reentrancy

Поделиться
HTML-код
  • Опубликовано: 27 дек 2024

Комментарии • 31

  • @tinerispe
    @tinerispe Год назад +4

    by far the clearest explanation of read-only reentrancies that i found.. great content as always, thanks!

  • @monsteryoung2117
    @monsteryoung2117 Месяц назад

    why does such great content have so few views?

  • @BhanuDebut
    @BhanuDebut 5 месяцев назад +1

    but if we delete or empty the states first then how the transfer line will be able to fetch or balance , as we already declared it empty before that .

  • @soaphornseuo8630
    @soaphornseuo8630 Год назад +2

    Clear explanation with simple way

    • @0xOwenThurm
      @0xOwenThurm  Год назад +1

      So glad it could help! I made it as simple as I could 🙏

  • @abdulahiadesokan7684
    @abdulahiadesokan7684 2 месяца назад

    Hi @owen is there a link to have access to this codes you used as example

  • @adugbovictory
    @adugbovictory 4 месяца назад

    enjoyed this content so much

  • @arjunbahera5481
    @arjunbahera5481 9 месяцев назад +1

    I did not get the Read Only Reentrancy, it seemed to me a classic case, why was it named read only?

    • @trololovete4
      @trololovete4 6 месяцев назад

      I think he made a mistake and removed the nonReentrant modifier, because he began with saying "this contract is not directly vulnerable/manipulatable", however it actually was.
      And even that, I think I still don't get it. As far as my knowledge spreads, its not possible to read values midway of a transaction, because state is reflected after the transaction has been executed, if it was possible to read midways of a transaction it would mean the the EVM is multithreaded and it is not. Its a stack-based single-threaded virtual machine.
      Curious to see what @0xOwenThurm has to say and actually clarify those questions.

  • @Sbi-x7f
    @Sbi-x7f Год назад

    thanks for the great content. demos in remix step-by-step debugger would make it become one of a kind!

    • @0xOwenThurm
      @0xOwenThurm  Год назад

      Tysm ser! Yes this would be a great addition!

  • @latricianickelberry3052
    @latricianickelberry3052 Год назад +1

    Great explanation!

  • @ujjwalshrestha5720
    @ujjwalshrestha5720 Год назад

    crystal clear explanation waiting for many other attack vectors explanation further..✌

    • @0xOwenThurm
      @0xOwenThurm  Год назад

      Glad it could help! Many more on the way

  • @Brian-vs9sd
    @Brian-vs9sd 11 месяцев назад

    Great explanation.

  • @phuonglm86
    @phuonglm86 Год назад

    Thank you @Owen !!!

  • @notbozho
    @notbozho Год назад

    Clear explanation and great content overall my guy. I'd love to see a video explaining the sandwhich attacks and how they work :)

  • @ngree4271
    @ngree4271 Год назад

    Hi Owen, if you start learning to code from scratch with 0 coding experience (no HTML, CSS, JS) and you start learning programming by only just learning what it needs to become a Smart Contract Auditor. Could you become Smart Contract Auditor again within 8 months of effort from that zero states? Thank you very much

    • @0xOwenThurm
      @0xOwenThurm  Год назад

      Yep! You should check out the 4 step roadmap to becoming an auditor video on this channel!

  • @DeepakKumar-uz4xy
    @DeepakKumar-uz4xy Год назад

    i heard in vyper lang this issue disabled by default, lol

    • @0xOwenThurm
      @0xOwenThurm  Год назад +1

      Don't know about that! Curve is in vyper and is perhaps the most famous case of read-only reentrancy.

    • @DeepakKumar-uz4xy
      @DeepakKumar-uz4xy Год назад

      @@0xOwenThurm this upgrade is done recently

    • @0xOwenThurm
      @0xOwenThurm  Год назад +1

      @@DeepakKumar-uz4xy I see very interesting, thanks for letting me know!
      I think it probably protects against single contract reentrancy but there's no way to automatically protect against cross-contract/read-only reentrancy unless you register them as a system.

  • @soaphornseuo8630
    @soaphornseuo8630 Год назад

    😊

  • @سرالحضارات-ي4ق
    @سرالحضارات-ي4ق Год назад

    Can make for me Arbitrag Smart contract flash loan