MASTR 支持这项工作

← 知识库首页

钱包与安全

Reentrancy

An external call transfers control before the caller finishes state updates.

Reference note · Sources below

研究文章和参考条目以英语发布。导航提供七种语言。

本文目录

Overview
Why it matters
What to check
Sources

Overview

An external call transfers control before the caller finishes state updates.

Why it matters

Reachable call order and invariant enforcement determine exploitability.

What to check

Test all callbacks and state transitions.

Sources

相关阅读

加密历史

Curve Vyper reentrancy incident

Several Curve pools were exploited in 2023 after a compiler issue affected protections in specific Vyper versions.

钱包与安全

A running chain can have an inaccessible app

Websites, RPC providers, DNS and indexers remain operational dependencies.

钱包与安全

A trusted frontend can still ask for the wrong transaction

Review the final wallet request, not only the page that produced it.

钱包与安全

A valid signature can approve the wrong action

Cryptographic validity and informed consent answer different questions.