solidity漏洞实践（一）

luc1fer丶

已于 2022-10-07 20:30:54 修改

阅读量311

点赞数

分类专栏： solidity 区块链文章标签： javascript 开发语言 ecmascript

于 2022-06-20 23:04:30 首次发布

本文链接：https://blog.csdn.net/m0_68764244/article/details/125382239

版权

本文探讨了Solidity智能合约中的两种漏洞，包括uint256溢出和call注入。通过实例分析，解释了如何利用这些漏洞满足特定条件以获取flag。作者承认自己不熟悉该领域，主要通过学习他人解决方案进行实践操作。

摘要由CSDN通过智能技术生成

题目描述

漏洞源码如下

pragma solidity ^0.4.19;
contract Vuln{
   
    address public owner;
    string public name     = "Chain";
    string public symbol   = "CHA";
    uint8  public decimals = 18;
    uint public totalSupply=10000000000;
    bool  public isLoan=false;
    bool public solved;
    event  Approval(address indexed from, address indexed to, uint number);
    event  Transfer(address indexed from, address indexed to, uint number);
    event  Deposit(address indexed to, uint number);
    event  Withdrawal(address indexed from, uint number);

    mapping (address => uint)                       public  balanceOf;
    mapping (address => mapping (address => uint))  public  allowance;
    constructor() public{
   
        owner=<