ATN漏洞学习

最新推荐文章于 2024-09-25 09:27:18 发布

放牛日记

最新推荐文章于 2024-09-25 09:27:18 发布

阅读量114

点赞数

文章标签：学习以太坊安全

本文链接：https://blog.csdn.net/Timmbe/article/details/123159468

版权

合约代码地址：https://etherscan.io/address/0x461733c17b0755ca5649b6db08b3e213fcf22546#codehttps://etherscan.io/address/0x461733c17b0755ca5649b6db08b3e213fcf22546#code
合约中判断auth的方法：

function isAuthorized(address src, bytes4 sig) internal view returns (bool) {
        if (src == address(this)) {
            return true;
        } else if (src == owner) {
            return true;
        } else if (authority == DSAuthority(0)) {
            return false;
        } else {
            return authority.canCall(src, this, sig);
        }
    }

如果请求包含合约地址自身而再合约内自身的多个transferFrom函数中function transferFrom(address _from, address _to, uint256 _amount, bytes _data, string _custom_fallback)函数

 function transferFrom(address _from, address _to, uint256 _amount, bytes _data, string _custom_fallback)
        public
        returns (bool success)
    {
        // Alerts the token controller of the transfer
        if (isContract(controller)) {
            if (!TokenController(controller).onTransfer(_from, _to, _amount))
               throw;
        }

        require(super.transferFrom(_from, _to, _amount));

        if (isContract(_to)) {
            ERC223ReceivingContract receiver = ERC223ReceivingContract(_to);
            receiver.call.value(0)(bytes4(keccak256(_custom_fallback)), _from, _amount, _data);
        }

        ERC223Transfer(_from, _to, _amount, _data);

        return true;
    }