For the following paper, I can’t understand the text written below: Securify Research Paper Our violation pattern checks that the amount of the call instruction is determined by a value read from the storage, whose offset in the storage is known (i.e., it is constant), and that this value can be updated.

My question is that the victim would send the amount of transaction through the instruction. But attacker reads the value from the storage. How the attacker alters the value sent using the built-in 'send' method by reading the data from the storage? Why the attacker does not use some random value instead of reading the data from storage?

Some body please guide me.



Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.