Randomness & Cryptography
Issues with randomness generation, signatures, and cryptographic operations
Missing Protection Signature Replay
Missing Protection against Signature Replay Attacks Sometimes in smart contracts it is necessary to perform signature verification to improve usabili...
Signature Malleability
Signature Malleability It's generally assumed that a valid signature cannot be modified without the private key and remain valid. However, it is poss...
Timestamp Dependence
Timestamp Dependence **NOTE: This vulnerability no longer affects Ethereum mainnet as of the Proof of Stake merge. [Read more](https://ethereum.stack...
Unsecure Signatures
Unsecure Signatures......
Weak Sources Randomness
Weak Sources of Randomness from Chain Attributes Using chain attributes for randomness, e.g.: `block.timestamp`, `blockhash`, and `block.difficulty` ...
Hash Collision
Hash Collision when using `abi.encodePacked()` with Multiple Variable-Length Arguments In Solidity, the `abi.encodePacked()` function is used to crea...
Unexpected Ecrecover Null Address
Unexpected `ecrecover` Null Address `ecrecover` is a precompiled built-in cryptographic function which recovers an address associated with the public...