漫谈以太坊公链安全.pdf

漫谈以太坊公链安全 罗元琮 PeckShield 漏洞研究總监 About Me 罗元琮 (Edward) • Director of Vulnerability Research at PeckShield • Has extensive experiences in OS kernel layer with deep knowledge in advanced vulnerability discovery and exploitation • Beforejoining PeckShield, I worked for Qihoo 360 as the team lead of C0RE Team, which was recognized by Google as the top research team in 2017. I am now focusing on the security of blockchain infrastructure • Submitted several vulnerabilities to the Ethereum Foundation Blockchain Status Quo ETHEREUM IN 2017 1,090 Dapps 700+ Tokens 100,000 New Users Per Day Daily Trading 1,000,000 MARKET CAP IN 2018 1,845 Cryptocurrencies Market Cap 200 Billion Global GDP Rank: ~50th Security Incidents 2018/06 Bithumb Hacks with $31 Million Dollars Stolen 2018/05 EDU, BAIC Smart Contracts Bugs 2018/04 BEC, SMT Smart Contracts Bugs 2018/04 Myetherwallet Suffer from DNS Hijacking 2018/02 BitGrail Hacks with Stolen Nano Tokens of 170 Million Dollars 2018/01 Coincheck Hacks with 530 Million Dollars Stolen 2017/12 Nicehash Hacks with 4700 BTC Missing with 62 Million Dollars 2017/06 Bithumb Hacks with 1 Billion Korean Yuan Loss and 30 Thousand User Info. Leaked 2016/08 Bitfinex Hacks with 120,000 BTC Stolen of 75Million Dollars 2016/01 Cryptsy Hacks with 13,000 BTC and 300,000 LTC Stolen 2015/01 Bitstamp Hacks with 19,000 BTC Stolen 2014/03 Poloniex Hacks with 12.3% BTC Lost 2014/02 Mt.Gox Hacks with Followed Bankruptcy Blockchain Ecosystem Digital Wallet Cryptocurrency Exchange