Webcast: Getting Started in Blockchain Security and Smart Contract Auditing

Why is blockchain security important? Blockchain usage has exploded since the Bitcoin whitepaper was first published in 2008. Many applications rely on this technology for increased trust and privacy, where they would otherwise be absent from a centralized system. The ecosystem surrounding blockchain technology is large, complex, and has many moving pieces. Exchanges exist where users can transact various cryptocurrencies, NFTs, and tokens. Smart contracts can be written to programmatically apply behavior to blockchain transactions. Decentralized Finance (DeFi) markets exist where users can swap tokens without needing to sign up for an account. All of these pieces are prone to vulnerabilities, and with blockchain being at the forefront of emerging technology, new issues are being found daily. In this Black Hills Information Security (BHIS) webcast, we’ll use case studies about recent blockchain hacks to introduce the underlying issues that occur in writing/engineering smart contracts that have ultimately lead to the loss of millions of dollars to attackers. Join us on the BLACK HILLS INFOSEC Discord channel for discussion and interaction with the community — https://discord.gg/bhis 0:00:00 – PreShow Banter™ — Beau Has a Fan Club 0:32:39 – FEATURE PRESENTATION: Getting Started in Blockchain Security and Smart Contract Auditing 0:36:39 – Roadmap 0:37:51 – Why Blockchain Security 0:39:21 – Growing Use Cases for Blockchain 0:43:23 – Blockchain Elements That Need Securing 0:49:00 – What Are Smart Contracts 0:51:22 – EVM : Ethereum Virtual Machine 0:54:00 – Solidity 0:59:55 – Smart Contract Vulns 1:04:00 – Reentrancy 1:05:54 – Front-Running 1:07:41 – Inter Overflow and Underflow

• (00:00) - PreShow Banter™ — Beau Has a Fan Club
• (32:39) - FEATURE PRESENTATION: Getting Started in Blockchain Security and Smart Contract Auditing
• (36:39) - Roadmap
• (37:51) - Why Blockchain Security
• (39:21) - Growing Use Cases for Blockchain
• (43:23) - Blockchain Elements That Need Securing
• (49:00) - What Are Smart Contracts
• (51:22) - EVM : Ethereum Virtual Machine
• (54:00) - Solidity
• (59:53) - Smart Contract Vulns
• (01:03:59) - – Reentrancy
• (01:05:52) - – Front-Running
• (01:07:39) - – Inter Overflow and Underflow
• (01:09:10) - – Denial-of-Service
• (01:10:38) - – Access Control
• (01:12:41) - – Timestamp Dependence
• (01:15:17) - Case Studies – Uranium Finance Hack
• (01:17:21) - – Poly Network Hack
• (01:21:02) - – Cream Finance Hack
• (01:24:37) - DEMO: Live Exploit
• (01:35:10) - Exploit Recap
• (01:35:40) - Security Tools – VS Code + Solidity Visual Developer
• (01:36:35) - – Slither
• (01:36:53) - – Mythril & MythX
• (01:37:23) - Get-Started Resources
• (01:38:30) - Bug Bounties
• (01:38:46) - Key Takeaways
• (01:39:56) - This is the End – Q & A