Advanced security reasoning
Begin with “Delegatecall storage collisions” and work toward “Advanced security scenario set”. Each available lesson includes a visual explanation and a quick knowledge check.
Read in order or choose a topic below. Completion marks stay in this browser. All 20 lessons in this track are available.
- 01
Delegatecall storage collisions
Different slot interpretations can turn an ordinary write into corruption.
4 MIN READ - 02
Proxy admin and implementation risks
Upgrade authority and application authority may be separate paths.
4 MIN READ - 03
Upgrade authorization failures
An upgrade path can bypass otherwise correct application permissions.
4 MIN READ - 04
Signature replay across chains
A message accepted on one chain may be accepted elsewhere without proper binding.
4 MIN READ - 05
EIP-712 domain mistakes
Signing and verification must agree on the intended domain fields.
4 MIN READ - 06
ERC-1271 validation assumptions
Contract-account approval can depend on current state and external calls.
4 MIN READ - 07
Calldata validation and type confusion
Decodable bytes can still represent the wrong intended action.
4 MIN READ - 08
abi.encodePacked collisions
Variable-width concatenation can erase field boundaries.
4 MIN READ - 09
Merkle proof leaf ambiguity
Leaf and branch encodings need an unambiguous separation.
4 MIN READ - 10
Callback trust boundaries
A callback is an entry point that needs its own authentication.
4 MIN READ - 11
Token hook reentrancy
A token interaction may invoke additional code.
4 MIN READ - 12
Cross-chain message authentication
A destination must validate origin and authorized sender, not just decode a payload.
4 MIN READ - 13
Bridge replay protection
A previously accepted message must not unlock the same claim again.
4 MIN READ - 14
Accounting invariants
State the quantity that must remain conserved or bounded.
4 MIN READ - 15
Donation and inflation attacks
Unsolicited assets can change share-conversion ratios in some vault designs.
4 MIN READ - 16
Liquidation edge cases
Price, collateral and rounding boundaries jointly determine eligibility.
4 MIN READ - 17
Precision loss across decimals
Conversion order and rounding can destroy small values.
4 MIN READ - 18
Emergency controls and governance risk
A protection mechanism also grants authority.
4 MIN READ - 19
Write a threat model
Describe assets, actors and trust boundaries before listing attacks.
4 MIN READ - 20
Advanced security scenario set
Combine multiple boundaries instead of checking each feature in isolation.
4 MIN READ