Solidity's most common security pitfalls (and its best safeguards)
Thu, Nov 16, 2023, 10:25 AM · 20:17
There are many common smart contract vulnerabilities that are found in audits or in hacks in the wild. The purpose of this talk is to showcase the most common vulnerabilities that are due to specificities and pitfalls of the actual Solidity language. This would be generally the results of a research study made on the language vulnerabilities found in audits (Solodit-based) and post audits (hacks and Immunefi report database). Some great language design decisions from a security perspective could also be presented.

GMHacker is an aerospace engineer who worked on IoT and embedded systems, finances on a large European bank, and in the digital TV industry. He turned into smart contract development and education, and he's now working at Immunefi, Web3's largest bug bounty program, where he served as a smart contract vulnerabilities triager and is now leading the smart contract work.
More from Solidity Summit
Experimental Solidity
Devconnect
Solidity Summit · Nov 16, 2023
Daniel Kirchner
How we built MUD: An On-chain Kernel for Complex Applications on Ethereum
Devconnect
Solidity Summit · Nov 16, 2023
Alvarius
Slang: Building Solidity Compiler APIs from a Declarative Language Specification
Devconnect
Solidity Summit · Nov 16, 2023
Omar Tawfik
The State of EVM Languages
Devconnect
Solidity Summit · Nov 16, 2023
Grant Wuerker, Harikrishnan Mulackal, Maddiaa
Branching Tree Technique: Writing structured Solidity tests
Devconnect
Solidity Summit · Nov 16, 2023
Paul Razvan Berg
Beyond Fuzzing: Symbolic Testing in Practice
Devconnect
Solidity Summit · Nov 16, 2023
Daniel "karmacoma" Reynaud
Differential Testing with Foundry
Devconnect
Solidity Summit · Nov 16, 2023
Anna Carroll
Namespace storage (for now and for a verkle EVM)
Devconnect
Solidity Summit · Nov 16, 2023
Hadrien Croubois
Documenting Solidity with diagrams
Devconnect
Solidity Summit · Nov 16, 2023
Nick Addison
Deep dive into L2 deployed contracts
Devconnect
Solidity Summit · Nov 16, 2023
Ren Crypto Fish
The Art of Huff
Devconnect
Solidity Summit · Nov 16, 2023
jtriley
Test your tests: The dos and don'ts of testing
Devconnect
Solidity Summit · Nov 16, 2023
Kurt Willis