Ethereum: hunting for buggy smart contracts

I have been interested in Ethereum and the EVM, primarily because it provides an environment with programs (“smart contracts”) anybody can interact with, and whose executable code is public.

Also, they contain and handle money, which make vulnerabilities very tangible. See Bernhard Mueller’s “Smashing Ethereum Smart Contracts for Fun and Actual Profit” for more details :)

Here are a few articles I wrote:

• The bZx attacks explained
• Analyzing suspicious smart contract vacuuming
• How to steal Ethers: scanning for vulnerable contracts
• Pakala: yet another EVM symbolic execution tool
• Syncing a Parity Archive Node: How-To