36 / The Solidity Bug 0.8.16
The Solidity bug is back and our team is on it! Join them in reviewing the latest contract updates and minifying the bug case. Find out what they discover in the world of decentralized apps.
Timeline
Participants
Episode notes
Edit these notes…- The Solidity bug
- Contract review: Arbitrum/Bridgeworld Harvesters
- Minified the bug case significantly from the Ethereum Foundation’s announcement
- Searched for functions in OpenSea’s Seaport repo that are subject to the bug
- ABI code
- Find all abi.encode…
- Find all external calls
- Dynamic
- Find strings
- Find bytes
- Find []
- Static
- [d+]
- ABI code
- Also search contracts for Zora, Binance NFT Marketplace, Foundation
- Got very close, but didn’t find any!
-
New Solidity bug [Head Overflow Bug in Calldata Tuple ABI-Reencoding Solidity Blog (soliditylang.org)](https://blog.soliditylang.org/2022/08/08/calldata-tuple-reencoding-head-overflow-bug/)