Ethereum VM May Have Vulnerability

The vulnerability is reported by NettaLab Twitter account
12 November 2018   1641

On November 9, a statement appeared in Netta Lab’s Twitter account that the organization discovered a vulnerability in the Ethereum virtual machine that allows to execute smart contracts endlessly without paying for gas online. The researchers also allegedly turned to the operator of the American database of vulnerabilities, where they registered the corresponding discovery.

Netta Labs discovered an Ethereum EVM vulnerability, which could be exploited by hackers. The vulnerability can cause smart contracts can be executed indefinitely without gas being paied.
 

Netta Lab's Twitter

At Netta Lab's request, Google demonstrates the site of the netto.io project, which specializes in auditing smart contracts under the Netta Lab brand, but the Twitter accounts of the projects do not match. Note that the profile that reported the vulnerability was registered in November.

Many users expressed doubts about the authenticity of the information that appeared, but then the creator of the NEO project Da Hongwei said that he spoke with the CEO of Netta Labs and asked the researchers to audit the NEO virtual machine.

Nevertheless, Vitalik Buterin wrote on Reddit that this is a vulnerability in the Python-implementation of the virtual machine, which was first reported on GitHub 9 days ago. This means that the main clients (go-ethereum; parity and cpp-ethereum) are not affected.

Python News Digest 14 - 20.03

Learn how Monty Python can teach you to code, why does all() return True if the iterable is empty, create WebRTC working example and more
20 March 2020   188

Greetings! I hope your week went great! Here's new frontend technologies news digest.

Learn how to do a binary search in Python, check the introduction to SQLAlchemy ORM for Django developers, read about the Python code metrics and other cool things, prerpared for you.

Guides

  • What Monty Python’s Ministry of Silly Walks can teach us about peer review

Even Monty Python can be used to learn programming

  • How to Do a Binary Search in Python

Tutorial that will teach you how to do a binary search in Python

  • Why does all() return True if the iterable is empty?

A detailed answer to the interesting question, that can usefu for both beginners and experienced Python developers

  • Introduction to SQLAlchemy ORM for Django Developers

Learn about the differences between SQLAlchemy and Django ORM from this tutorial

  • WebRTC: a working example

This tutorial will guide you through the process of creating a simple video chat app using Python and JS that leverages WebRTC

Articles

  • The most critical Python code metric

Great overview of Python code metric

  • Against service layers in Django

Author explains why there's no need for service layers in Django, in his opinion

  • Documentation as a way to build Community

Learn why documentation is a valuable thing when creating the community

  • HTTP Desync Attacks with Python and AWS

A small but interesting reseach of the certain type of attacks

  • Get started using treq to make async calls in Python

A material for the beginners - guide to asynchronous API calls with Python's Twisted package