Difference between revisions of "Reentrancy Attack"
wiki_crypto>Zeb.dyor (Created page with "* This happened with the DAO hack and also twice in April 2020 with Uniswap and dForce. * [https://thedefiant.substack.com/p/hackers-steal-25-million...") |
m (1 revision imported) |
Latest revision as of 08:59, 23 January 2022
- This happened with the DAO hack and also twice in April 2020 with Uniswap and dForce.
- From The Defiant (21-4-2020):
"The core of the attack is called reentrancy: The possibility for a smart contract function to be executed multiple times concurrently, which might bring state inconsistencies if the function is not implemented properly.
What is Reentrancy anyway? Contracts interact. To be able to move your DAI or USDC from Compound to Aave or MakerDAO, for example, the smart contracts of each of these platforms interact with other contracts that define the currencies being used, in this case the DAI contract and the USDC contract. This complex network of interactions allows developers to implement all the beautiful things we see running on Ethereum. Everything works well when the contracts that interact trust each other. But what if we put in the middle of these interactions a malicious actor?"
