The leaks · 49 / 86
Exploit patterns
People have lost deposits because a contract did the steps in the wrong order, trusted a price it should not have, or let someone borrow for one transaction and take the pool. This course names the losses. It does not teach the attack.
What has happened
A withdrawal that could be repeated. A price that was shoved for a single moment. A loan that existed only for one transaction and was used to empty a pool. Users woke up to a contract with nothing left.
What you do with that
Prefer systems that have been used with real money for a long time, that say who can upgrade them, and that do not promise a strange yield. New plus high reward plus an admin key is how these stories start.
Do not look for a recipe. The recipe is how the next person gets hurt. Knowing the shape is enough to walk away.
Check yourself
Should this course show you the steps of an attack?
No. It names what people lost, so you can refuse the setup.
After this you can walk away from a brand-new pool that pays a strange yield and can be upgraded.