胡耀傑 | Smart Contract Vulnerabilities: DASP Top 10 Exploits Walk Through | TPE ETH @ COSCUP 2019

Smart Contract Vulnerabilities: DASP Top 10 Exploits Walk Through Blockchain evolved too quickly during the last decades, in which dozens of types of decentralized solutions outpaced and eliminated their obsolete competitors. Ethereum, as the second stage of the blockchain evolution, has launched a new way of blockchain programming via a Turing-complete language - Solidity. Though the breakthrough heralded advantages to the community of the developers, tens and hundreds of security concerns have been aroused within the dark place of hackers. Far more than 1.6 billion USD has evaporated through the past 10 years of blockchain history, and many of them are thanks to notorious vulnerabilities of the use of Solidity. The hard fork of Ethereum that resulted in Ethereum Classic and Ethereum itself was attributed to The DAO hack with the reentrancy exploits on its contract. The bankruptcy of BEC chain resulted from the other integer overflow pitfall during batch transfer of its assets. Lots has fallen, billions has gone, and we want to be the survivors. This workshop will walk you through the DASP top 10 exploits on smart contract and will equip you with the skillsets that a “safe” smart contract developer should have. 共筆: https://hackmd.io/@coscup/rkVllXlEH 講者: 胡耀傑（Jeff Hu） 胡耀傑 Jeff 現任圖靈鏈科技執行長與共同創辦人，加州柏克萊區塊鏈研究院受邀學者，紐約新聞區塊鏈BlackbirdAI首席技術總監。曾以學測滿級分與全額獎學金於香港科技大學研讀電腦科學，並以最高榮譽畢業，期間成為該校歷史首位前往矽谷實習的學生代表，曾於瑞士洛桑聯邦理工與香港JP Morgan研發深造。發表過三篇區塊鏈論文於權威論壇ACM與IEEE及國際期刊CPE，並在德國慕尼黑CryBlock獲頒2018最佳論文。曾獲微軟創夢盃 2017香港亞軍、韓國 2018 UpTown 金融科技競賽亞軍等十幾項各類國際大獎。 Slide: https://drive.google.com/file/d/1Dolw6docvC8zYKJSK13F2Vu2jKl6kium ===== 加入 Meetup 以得知下次聚會時間地點： http://www.meetup.com/Taipei-Ethereum-Meetup/ slack 討論：https://ethertw.slack.com 。請先從網站取得邀請信： http://bit.ly­/252hNY0 通關密語：decentralized 臉書社團： https://www.facebook.com/groups/443751072484739 歷次講座投影片、程式碼整理： https://github.com/EtherTW/Taipei-Ethereum-Wiki/wiki