Skip to main content

The following is a list of known attacks which you should be aware of, and defend against when writing smart contracts.

CategoryDescription
ReentrancyIntra- and inter-function reentrancy attacks and potentially faulty solutions to them.
Oracle ManipulationManipulation of external data providers and potential solutions to oracle security issues.
FrontrunningA definition and taxonomy around frontrunning and related attacks.
Timestamp DependenceAttacks relating to the timing of a transaction.
Insecure ArithmeticInteger overflows and underflows.
Denial of ServiceDenial of service attacks through unexpected reverts and the block gas limit.
GriefingAttacks relating to bad faith players around a smart contract system.
Force FeedingForcing Ether to be sent to smart contracts to manipulate balance checks.
Deprecated/HistoricalAttacks that are part of Ethereum's history and vulnerabilities that have been fixes on a (Solidity) compiler level.

References​