Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

feat(attack): Secret Size Attack #16

Merged
merged 4 commits into from
Aug 23, 2022
Merged

feat(attack): Secret Size Attack #16

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
ed74ef2
feat(attack): Secret Size Attack
sambacha Aug 23, 2022
75f4045
v3.0.3
sambacha Aug 23, 2022
b4c8040
v0.7.1
sambacha Aug 23, 2022
f3dae9e
release: v3.0.3
sambacha Aug 23, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 9 additions & 3 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
# Decentralized Finance Threat Matrix

- v3.0.2 is the latest release (v2022.06.13-302)
- [v3.0.3 is the current release (v2022.08.23-303)](https://github.com/manifoldfinance/defi-threat/blob/secret-size-attack/v3.0.3.md)
- v3.0.2 is the previous release (v2022.06.13-302)

## Advisories

Expand All @@ -10,6 +11,11 @@ We are now publishing Security Advisories [https://github.com/manifoldfinance/de

### Changes

v3.0.3
New attack: Secret Size Attack
New Category: Interchain, id: 006

v3.0.2
New attacks such as: <br>
Ex Post/Ex Ante Reorg (On-Chain), <br>
Compiler not Optimizing errors (Solidity), <br>
Expand All @@ -29,7 +35,7 @@ be specialized towards the unique issues brought about in blockchain/cryptocurre

## Overview of Threat Matrix

> version v3.0.2/2022.06
> version v3.0.3/2022.08

| _001_ | _002_ | _003_ | _004_ | _005_ |
|--- |--- |--- |--- |--- |
Expand Down Expand Up @@ -60,7 +66,7 @@ be specialized towards the unique issues brought about in blockchain/cryptocurre
| Cascading Loan Failure | Unexpected Fee on Transfer | Man in the Blotter | Ex Post Reorg | Compiler Optimizer not Optimizing |
| | | BGP Routing | Nonstandard Proxy Implementation | Math operations differ in certain pragmas |
| | | IP4/IP6 misconfiguration | Tyranny of the Majority | Uninitialized Contract |
| | | | | |
| | | | Secret Size Attack | |


### v2 Matrix
Expand Down
6 changes: 3 additions & 3 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
{
"name": "defi-threat-matrix",
"version": "0.7.0",
"description": "decentralized econometric threat and security assesment",
"version": "0.7.1",
"description": "a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations on decentralized finance",
"repository": "https://github.com/manifoldfinance/defi-threat",
"author": "sam bacha <sam@freighttrust.com>",
"author": "sam bacha <sam@manifoldfinance.com>",
"license": "MPL-2.0",
"private": false,
"scripts": {},
Expand Down
2 changes: 1 addition & 1 deletion v3.0.2.md → v3.0.3.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,4 +27,4 @@
| Cascading Loan Failure | Unexpected Fee on Transfer | Man in the Blotter | Ex Post Reorg | Compiler Optimizer not Optimizing |
| | | BGP Routing | Nonstandard Proxy Implementation | Math operations differ in certain pragmas |
| | | IP4/IP6 misconfiguration | Tyranny of the Majority | Uninitialized Contract |
| | | | | |
| | | | Secret Size Attack | |