4 ms·
How did the white hats understood the vulnerability? I don't know anything about ethereum so i'm honestly asking. Is there a public log of the method invocation
by andretti1977 9y ago
How did the white hats understood the vulnerability? I don't know anything about ethereum so i'm honestly asking. Is there a public log of the method invocations so they could see the hacker was exploiting that exact vulnerability and decided to replicate it?
- nileshtrivedi 9y agoThe article links to the initWallet() call on etherscan.io
- mpeg 9y agoYep, if you saw the attack done it was really easy to replicate it as all transactions are public. In fact, it's a testament to the poor technical capability of most people involved in Ethereum that the whitehat was even able to do this, in any other environment you'd have had other blackhats clean out the remaining $90m within minutes, all it took was to fire up a web3 console (ethereum's javascript interface) and call the initWallet method with your own address on it. Then you could drain the contract at will.
- Oras 9y agoand if there is a group of white-hat hackers supporting and monitoring, how come they didn't find that before and fixed it?