-
Notifications
You must be signed in to change notification settings - Fork 1
/
index.js
207 lines (206 loc) · 3.87 KB
/
index.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
"use strict";
// const defi_threat_matrix = require('./index.json');
module.exports = [
{
THREAT_MATRIX: [
1,
2,
3,
4,
5,
6,
7,
8,
9,
10,
11,
12,
13,
14,
15,
16,
17,
18,
19,
20,
21,
22,
23,
24,
25,
26,
27,
28,
29,
30,
31,
32,
],
market_attacks: [
"Front-Running",
"Coordinated Attack",
"Liquidity Pocket",
"Quote Stuffing",
"Wash Trading",
"Ramping The Market",
"Cornering The Market",
"Churning",
"Flash Loans",
"Aggregated Transactions",
"Bulge Bracket Transactions",
"Layering",
"Spoofing",
"Order Book",
"Market Index Calculation Attack",
"Flash Crash",
"Repo",
"Excessive Leverage",
'Breaking the "Buck"',
'"Fake" News',
"Nested Bot",
"Audience of Bots",
"Arb. Exploit",
"Slippage Exploit",
"Safety Check Exploits",
"Circulating Supply Dump",
"Governance Cartel",
'Flash "Straddle"',
"Structuring",
"",
"Back-Running",
],
economic_attack: [
"Front-Running",
"Insufficient gas griefing",
"Token Inflation",
"Circulating Supply Attack",
"Gas Griefing (DoS)",
"Network Congestion (uDoS)",
"Liquidity Squeeze",
"Smurfing",
"Like Asset Price Divergence",
"Price Induced Oracle Volatility",
"Stalking Horse",
"Blockchain Transaction Based",
"Governance Attack",
"Interlocking Directorate",
"Governance Cartels",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
],
"off-Chain": [
"Price Feed",
"Quote Stuffing",
"Spoofing",
"Credential Access",
"Reentrancy",
"Privilege Escalation",
"Credential Access",
"Encryption Protections",
"Phishing",
"Unicode Exploits",
"API",
"DNS Attacks",
"Transaction Pool",
"Checksum Address",
"Siphon Funds",
"",
"Synthetic Mint Spread",
"Syscall Exploit",
"Container Priv. Escalation",
"Keyctl missuse (syscall)",
"Unlimited Permissions on Token Approval",
"Influencers'",
"",
"",
"",
"",
"",
"",
"",
"",
"",
],
"on-Chain": [
"Timestamp Dependence",
"Admin Key",
"Timelock",
"Lateral Movements",
"Multi-Sig Keys",
"Miner Cartel",
"Finality",
"Honeypot",
"Red Queen",
"Sole block synchronization",
"Transaction Pool",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
"",
],
solidity_EVM: [
"Integer Overflow and Underflow",
"DoS with (Unexpected) revert",
"DoS with Block Gas Limit",
"Arithmetic Over/Under Flows",
"Forcibly Sending Ether to a Contract",
"Delegatecall",
"Entropy Illusion",
"Short Address/Parameter Attack",
"Uninitialized Storage Pointers",
"Floating Points and Numerical Precision",
"Right-To-Left-Override control character (U+202E)",
"Delegatecall to Untrusted Callee",
"Requirement Violation",
"Shadowing State Variables",
"Transaction Order Dependence",
"Assert Violation",
"Uninitialized Storage Pointer",
"Unprotected Ether Withdrawal",
"Floating Pragma",
"Outdated Compiler Version",
"Function Default Visibility",
"msg.sender",
"",
"",
"",
"",
"",
"",
"",
"",
"",
],
},
];
// @export default