cwhinfrey

An Incomplete Taxonomy of Cross-Chain Messages

Single or Batched

Single Messages - Single messages have a single target address, target chainId, and data payload. The vast majority of cross-chain messages today are single messages.

Example:

function dispatchMessage(uint256 toChainId, address to, bytes calldata data) external payable returns (bytes32 messageId);

cwhinfrey

ChainSwap 1

• $800k
• July 2, 2021
• Vulnerability: Smart contract bug
• Note: Users reported lost funds, ChainSwap shut down all nodes and a fix was deployed within 30 minutes.
• Source: https://chain-swap.medium.com/chainswap-post-mortem-and-compensation-plan-90cad50898ab

ChainSwap 2

• $4.4M
• July 10, 2021
• Vulnerability: Smart contract bug

cwhinfrey

contract GasBurner {
    uint[] nums;
    
    function doSomethingHeavy() public {
        for( uint i = 0; i < 50; i++ ) {
            nums.push(i);
        } 
    }
 }

cwhinfrey

pragma solidity 0.5.16;

pragma experimental ABIEncoderV2;

contract IAuthereumAccount {

    function () external payable;
    
    // getters
    function authereumVersion() external view returns(string memory);

cwhinfrey

This post links my 3Box profile to my Github account! Web3 social profiles by 3Box.
    
  ✅ did:3:bafyreighubmjjux4mh55yaqer6fsfeyg2lozjtpjr7kygwv27vz2sqwn3i ✅
    
    Create your profile today to start building social connection and trust online at https://3Box.io/

cwhinfrey

pragma experimental ABIEncoderV2;

interface IAuthereumAccount {
    // This is required for funds sent to this contract
    function () external payable;
    
    /// @dev Get the number of authKeys
    /// @return The number of authKeys
    function numAuthKeys() external view returns (uint);

cwhinfrey

pragma solidity ^0.5.10;

// V1

contract AccountV1Storage {
    uint lastInitializedVersion;
    uint a;
}

contract AccountV1 is AccountV1Storage {

cwhinfrey

pragma solidity ^0.5.0;

contract BasicProxy {

  address public implementation = 0xB6Eb4245eF5626E3505c6223D3157FCE3CE8d0AE;

  function () external payable {
    address target = implementation;
    
    assembly {

cwhinfrey

/**
 * @title Create2
 *
 * @dev Utility library for deploying contracts with the CREATE2 EVM opcode and 
 * computing the contract address of CREATE2 deployments
 */
library Create2 {
    /**
     * @dev Function to compute the address of a contract created with CREATE2.
     * @param _salt The salt used to the contract address computation

cwhinfrey

pragma solidity ^0.5.8;

contract Channels {
    function deposit(address _participant) public payable;
}

contract Bouncer {
    Channels channelContract;
    address participant;