MENU

Practical Solidity Experiment #21 (Ethernaut – DoubleEntryPoint)

Do you know the offset of a parameter in the external function’s calldata area? In order to extract a parameter from the calldata area directly, you have to know the offset. It requires you to know about the layout of calldata.Calldata is a non-modifiable, non-persistent area where function arguments are stored, and behaves mostly like memory.In other words, ABI encoded function data exists in there.What is the rule to encode though?Contract ABI stands for: The Contract Application Binary Interface (ABI) is the standard way to interact with contracts in the Ethereum ecosystem, both from outside the blockchain and for contract-to-contract interaction. Data is encoded according to its type, as described in this specification. The encoding is not self describing and thus requires a schema in order to decode. We assume the interface functions of a contract are strongly typed, known at compilation time and static. We assume that all contracts will have the interface definitions of any contracts they call available at compile-time. You can understand the encoding rule of function parameters and use this knowledge to get the correct data offset you want to get in calldata.Here is a good Solidity wargame inspired by Ethernaut.Through that, you can practice calldata […]
Read More ›

Practical Solidity Experiment #20

Do you need to zero-initialize every element when you allocate a new memory array in Solidity? They are saying all differently. YES – The memory may or may not be zeroed out. Because of this, one should not expect the free memory to point to zeroed out memory. NO – As all variables in Solidity, the elements of newly allocated arrays are always initialized with the default value. These two answers are written on Solidity official doc. Much confused! And as always, I decided to make an experiment to give myself a clear answer. It passes without an exception.As you see, it’s redundant to initialize the newly created array. – Tonyhttps://github.com/maAPPsDEV
Read More ›

Calculate smart contract address

https://github.com/maAPPsDEV/recovery-attack
Read More ›

Alien Codex

https://github.com/maAPPsDEV/alien-codex-attack
Read More ›

Everything about Solidity Dynamic Array

https://github.com/maAPPsDEV/DynamicArray
Read More ›

delegatecall vs call in Solidity

https://github.com/maAPPsDEV/delegation-attack
Read More ›

In order to prevent Overflow/Underflow

https://github.com/maAPPsDEV/token-attack
Read More ›

Solidity tx.origin vs msg.sender

https://github.com/maAPPsDEV/telephone-attack
Read More ›

The true meaning of Solidity private variable

https://github.com/maAPPsDEV/vault-attack
Read More ›

Coin Flip game you never lose

https://github.com/maAPPsDEV/coin-flip
Read More ›