Bernhard Mueller - The Ether Wars: Exploits, Counter-Exploits, and Honeypots
Analyzes the adversarial ecosystem of Ethereum smart contract exploits and counter-exploits, including honeypot contracts designed to trap attackers.
Summary
Ethereum Smart Contract Adversarial Ecosystem
Bernhard Mueller (Trail of Bits security engineer) presents research on the predatory dynamics of the Ethereum smart contract ecosystem — a battleground where exploiters, counter-exploiters, and honeypot operators compete for funds.
Common Smart Contract Vulnerabilities
The talk reviews the canonical exploit classes: reentrancy (as exploited in the DAO hack), integer overflow/underflow, front-running via transaction ordering, and access control failures in proxy patterns.
Honeypot Contract Analysis
The Ethereum blockchain contains thousands of honeypot contracts — deliberately vulnerable-looking contracts designed to trap inexperienced attackers who attempt to exploit them, only to discover a hidden mechanism that transfers their deposited funds to the honeypot creator.
Counter-Exploit Bots
Mueller analyzes sophisticated automated bots that monitor the Ethereum mempool for transactions exploiting vulnerable contracts and front-run them with higher gas prices to steal the attacker's extracted funds, creating a recursive exploit ecosystem.
Related talks
Blockchain Village·31 min
Martin Abbatemarco
Presents a structured seven-phase methodology for auditing and attacking smart contracts, from reconnaissance to post-exploitation.
RSAC Cybersecurity·25 min
Analysts investigate attack surfaces and defenses concerning Foundations of Bitcoin, Blockchain and Smart Contracts: Beginner's Guide to Ethereum, Tokens, an....
Main Stage·20 min
Nils Amiet · Marco Macchetti
Nils Amiet and Marco Macchetti introduce Polynonce, a novel cryptanalytic attack recovering ECDSA private keys from nonce bias across Bitcoin and Ethereum.