An overview of Ethereum and Solidity vulnerabilities

摘要

The security of the Ethereum Smart contracts constitutes the most important step toward securing the whole blockchain since it is opensource and anyone can write and deploy malicious contracts and make profits from doing so. The immutable aspect of the blockchain makes it hard to roll back malicious codes to restore the state of the EVM. In this paper, we propose a taxonomy for the vulnerabilities of smart contracts written in solidity language. We also proceed with some simple simulations of some attacks and errors on smart contracts and we demonstrate how these vulnerabilities can tamper with the state of the Ethereum blockchain.