Watch / The Gas Siphon Attack: How it Happened and How to Protect Yourself

The Gas Siphon Attack: How it Happened and How to Protect Yourself

  • YouTube
  • IPFS
  • Swarm
  • Details

The Gas Siphon Attack: How it Happened and How to Protect Yourself

Duration: 00:24:08

Speaker: Shane Fontaine

Type: Breakout

Expertise: advanced

Event: Devcon 5

Date: Oct 2019

The Gas Siphon Attack allows anyone to siphon value from many exchanges in the form of gas refunds, a mechanism built directly into the Ethereum protocol. Users can write a simple script that continuously drains unprotected exchange hot wallets of all of their ETH. Until this was responsibly disclosed, many exchanges were affected with varying degrees of severity. How it happened, who was affected, and the technical details behind the attack are discussed during the presentation. The talk dives into the details of the refund mechanism built into the Ethereum network, and how it can be maliciously abused. The presentation explains who is vulnerable and what they can do about it. Finally, the talk covers different ways to protect yourself and your dapp from both known and unknown exploits. Preventative measures are presented that will allow for protection from these types of attacks.

Categories

Playlists

  • Related