Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Contract upgrade anti-patterns

blog.trailofbits.com | blog | #cloud | #web3 | #smart-contracts | #vulnerabilities | #blockchain | #delegatecall | #upgradable-contracts | #erc20

Summary

Reviewing many upgradable contracts, Trail of Bits argues current upgrade patterns - data separation and delegatecall proxies - add complexity and introduce exploitable bugs.
Published
Collected

original ↗

Related coverage

  1. HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry (hackenproof.com)
  2. HackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a Course for the Blockchain Industry (hackenproof.com)
  3. State divergence enables unauthorized access (blog.trailofbits.com)
  4. 1inch Bug Bounty Report: Aqua Edition, H1 2026 (hackenproof.com)
  5. Securing Layer 1 Blockchain Protocols: Security Guide (hackenproof.com)
  6. How to Prevent Most Common Smart Contract Vulnerabilities (hackenproof.com)

back