Skip to content

Latest commit

 

History

History
19 lines (10 loc) · 1.31 KB

avoiding_common_attacks.md

File metadata and controls

19 lines (10 loc) · 1.31 KB
Raw

Avoiding Common Attacks

This project consciously avoids the following common attack vectors and issues:

SWC-107 Reentrancy

The contract always reads and write to persistent state following external calls. In particular, state is always updated before performing ether, ERC20 or ERC721 transfers to avoid reentrancy attacks.

SWC-113 DoS with Failed Call

Only one call is ever made in a single transaction and users must claim() their ether upon a buyout() of a fractionalized NFT; the funds are not pushed (avoids DoS with Unexpected revert).

SWC-103 Floating Pragma

No floating pragmas are set; the solc version is fixed. This ensures that the bytecode does not vary between builds in different environments that may use different solc versions.

SWC-101 Integer Overflow and Underflow and SWC-129 Typographical Error

The contract makes use of OpenZeppelin's Counters.sol to avoid integer overflow and typographical errors (writing =+ instead of +=) that could occur when manually updating the value of the counter.