You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Best practice with Aion is to explicitly define all storage locations using an enum and then use these enums for all calls to putStorage. This avoids overlapping storage, which is also a vulnerability.
And the potentially controversial:
Also, use static storage only for recursive call state and configuration options which apply to all onchain transactions.
Seeking to review this statement with AVM team to ensure we are aligned.
Additionally we find that the current API for storing to blockchain is likely to (and may actually have) result in insecure applications.
This project makes the assertion:
And the potentially controversial:
Seeking to review this statement with AVM team to ensure we are aligned.
Additionally we find that the current API for storing to blockchain is likely to (and may actually have) result in insecure applications.
Upstream ticket: aionnetwork/AVM#399
The text was updated successfully, but these errors were encountered: