Bancor’s Bug Exposes Dangerously Common Practice in Ethereum DeFi
Many DeFi smart contracts can withdraw unlimited amounts of money from user wallets, potentially spelling disaster. A vulnerability discovered on Bancor on June 18 would have allowed hackers to simply drain the funds of anyone who interacted with its smart contracts. The exploit relied on the concept of withdrawal authorization, introduced in the ERC-20 standard. […]
Continue Reading