Intro to Smart Contract Security Audits | Selfdestruct

  1. Transfer: Throws exception when an error occurs, and the code will not execute afterward
  2. Send: The transfer error does not throw an exception and returns true/false. The code will continue to execute.
  3. call.value().gas: Transfer error does not throw an exception and returns true/false. The code will execute, but call functions for transfer are prone to reentrancy attacks.

Let’s look at an example of an Attack contract

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
SlowMist

SlowMist

1.6K Followers

SlowMist is a Blockchain security firm established in 2018, providing services such as security audits, security consultants, red teaming, and more.