nadir-akhtar

Smart Contract Best Practices

A collection of links for self-learning and for anyone else to use. Feel free to recommend or remark on either links or on the gist structure!

Background

• Overview of Smart Contracts (ConsenSys): https://medium.com/@ConsenSys/a-101-noob-intro-to-programming-smart-contracts-on-ethereum-695d15c1dab4
• Overview of Smart Contracts (Zeppelin Solutions): https://blog.zeppelin.solutions/the-hitchhikers-guide-to-smart-contracts-in-ethereum-848f08001f05
• Smart Contract Best Practices (ConsenSys): https://consensys.github.io/smart-contract-best-practices/
• Answers to Deep Questions about Solidity (Christian Reitwiessner of The Ethereum Foundation):

nadir-akhtar

Capture the Ether Writeup

This writeup is a runthrough of challenges at https://capturetheether.com/challenges/ built on the Ropsten testnet. I will go through each problem in four steps:

1. The intention of the contract
2. The flawed assumption
3. The process of exploiting the vulnerability
4. The potential patches

I'll provide examples of the code I wrote as needed. To save time, we'll skip into the Lotteries section, starting with Guess the secret number, as that's the first problem which truly required some thought.