Wiki
Biturai Trading Wiki
The Biturai crypto encyclopedia: AI-assisted, data-informed, and continuously quality-audited.
Rebasing Token Risks in DeFi Integrations
Rebasing tokens automatically adjust their supply based on market conditions, aiming for price stability or specific targets.
Fee-on-Transfer Tokens as a Security Risk for Protocols
Fee-on-Transfer tokens automatically deduct a percentage fee during transactions, causing a discrepancy between the amount sent and the amount received.
Phantom Function Tokens and Non-Standard ERC-20 Tokens
ERC-20 defines the standard for fungible tokens on Ethereum, ensuring predictable interactions across the ecosystem.
ERC-20 Approval Race Condition Explained
The ERC-20 approval race condition is a security vulnerability in smart contracts that allows a spender to exploit timing differences during token allowance updates. This can lead to unauthorized transfers or double-spending of tokens.
Frozen Crypto Funds: Causes, Risks, and Resolution
Frozen crypto funds refer to digital assets that become inaccessible, either temporarily or permanently, preventing users from trading, withdrawing, or transferring them.
Bad Randomness in Smart Contracts: Manipulating On-Chain Randomness
Bad randomness in smart contracts arises when predictable on-chain data is used for random number generation, creating exploitable vulnerabilities.
Timestamp Dependence: Block Timestamps as an Attack Vector
Timestamp dependence is a vulnerability in smart contracts where critical logic relies on the block.timestamp value. This value, set by miners, can be slightly manipulated, creating an attack vector for unfair advantages.
Unchecked External Calls: Ignored Return Values in Solidity
An unchecked external call in Solidity occurs when a smart contract interacts with another contract or address but fails to verify if that interaction was successful.
Force-Feeding Ether as a Smart Contract Attack
Force-feeding Ether is a smart contract vulnerability where an attacker can send Ether to a contract even if it lacks explicit functions to receive it.
Gas Griefing and Denial-of-Service via Gas Limits
Gas griefing is a type of attack where an attacker manipulates gas consumption in a smart contract to cause transactions to fail or become excessively expensive for other users.
The ERC-4626 Donation Attack Explained
The ERC-4626 Donation Attack is a vulnerability in tokenized vaults where an attacker manipulates the asset-to-share exchange rate.
First-Depositor Attack on DeFi Vaults and Pools
A First-Depositor Attack exploits a vulnerability in DeFi protocols where an attacker manipulates the share price of an empty liquidity pool or vault.
Rounding Error Exploits in DeFi Protocols
Rounding errors in DeFi protocols are subtle vulnerabilities arising from integer arithmetic limitations in smart contracts.
Nonce Reuse as a Cryptographic Vulnerability
A nonce is a unique, arbitrary number used once in cryptographic communications to prevent replay attacks and ensure data integrity.
Signature Malleability: Manipulating ECDSA Signatures
Signature malleability allows a valid digital signature to be altered into another equally valid one without needing the private key.
Signature Replay Attacks in Smart Contracts
A signature replay attack occurs when a valid digital signature is intercepted and reused to authorize an unintended action, often exploiting vulnerabilities in smart contract verification logic.
Price Oracle Manipulation Through Spot Prices
Price oracle manipulation via spot prices involves attackers distorting asset prices on decentralized exchanges to trick smart contracts.
Storage Collision in Proxy Contracts
A storage collision is a critical vulnerability in upgradeable smart contracts where the proxy and implementation contracts inadvertently use the same storage slots for different state variables.
Understanding the Uninitialized Proxy Vulnerability
The uninitialized proxy vulnerability allows attackers to seize control of smart contract proxies during deployment.
Access Control Vulnerabilities in Smart Contracts
Access control vulnerabilities occur when a smart contract fails to properly restrict who can execute its sensitive functions. These flaws are a leading cause of financial loss in the blockchain ecosystem.