Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

For questions relating to the security of the blockchain, contracts and dApps.

3
votes
1answer
59 views

How does EOS prevent one contract from accessing another contract's tables without authorization?

I noticed that multi-index (which is under eosio namespace) uses the following to prevent access to another contract's tables: eosio_assert( _code == current_receiver(), "cannot create objects in ...
6
votes
1answer
54 views

Is there a flaw in deciding who can pay for RAM?

Lets say I interact with an action from a smart contract, if I'm not careful and didn't read or couldn't understand the source code for the smart contract, is it not possible that the contract could ...
4
votes
1answer
32 views

What are the worst cases if I allow my contract to call an evil action of an evil contract?

I am considering to allow my contract to call the transfer action of a user specified contract. I would like to know what are the worst cases that can happen with this design. My contract code will ...
1
vote
0answers
20 views

How to compile keosd with Secure Enclave support?

I've followed the steps outlined here https://github.com/EOSIO/eos/issues/4604 and gathered the required info. I'm trying this on a Mac with T2 chip. For Step 3, how should I modify the eosin_build....
3
votes
1answer
56 views

What's the best way to prevent overflow/underflow attack?

In Solidity, people use a SafeMath library to prevent overflow/underflow attack. So, I wonder what's the best way to prevent overflow/underflow attack for EOS contract. Is there an easy-to-use ...
3
votes
1answer
57 views

Can a plugin be configured to only process irreversible blocks?

We would like to implement a custom plugin within our own node, in order to listen to transactions from the main net, and then push relevant information to external services. However, we are ...
5
votes
1answer
74 views

Is delegated Proof of Stake vulnerable to government censorship?

EOS uses delegated Proof of Stake, Dan's innovation used also in previous graphene blockchains such as Bitshares and Steem. I was reading commentary from a blockchain news and commentator, Bruce ...
4
votes
1answer
111 views

360 Security Bug Claim. Truth or FUD?

Coingape reported that Internet Security Giant 360 found an Epic Secutiry Bug in EOS. According to the article, "remote attacks on its blockchain platform can directly control it and take over all ...
11
votes
0answers
114 views

How is EOS WASM virtual machine hardened?

WASM, famous from web browsers, regularly sees breaking out of sandbox issues. For example, see WebAssembly notes here: https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-google-chrome-...