Data & Storage Vulnerabilities
Issues related to storage, data handling, and on-chain privacy
Arbitrary Storage Location
Write to Arbitrary Storage Location Only authorized addresses should have access to write to sensitive storage locations. If there isn't proper autho...
Asserting Contract From Code Size
Asserting contract from Code Size A common method for asserting whether a sender is a contract or EOA has been to check the code size of the sender. ...
Transaction Ordering Dependence
Transaction-Ordering Dependence Transactions on Ethereum are grouped together in blocks which are processed on a semi-regular interval, 12 seconds. B...
Unencrypted Private Data On Chain
Unencrypted Private Data On-Chain Ethereum smart contract code, storage, and any data transacted on-chain can always be read. Treat it as such. Even ...
Uninitialized Storage Pointer
Uninitialized Storage Pointer > [!NOTE] > As of solidity `0.5.0`, uninitialized storage pointers are no longer an issue since contracts with uninit...