{"id":3298,"date":"2025-11-06T19:04:00","date_gmt":"2025-11-06T11:04:00","guid":{"rendered":"https:\/\/systw.net\/note\/?p=3298"},"modified":"2026-11-06T20:06:55","modified_gmt":"2026-11-06T12:06:55","slug":"ctf-vault","status":"publish","type":"post","link":"https:\/\/systw.net\/note\/archives\/3298","title":{"rendered":"CTF Vault"},"content":{"rendered":"\n

\u9019\u4e00\u95dc\u7684\u6838\u5fc3\u65e8\u5728\u63ed\u793a Solidity \u4e2d private<\/code> \u4fee\u98fe\u7b26\u7684\u5b89\u5168\u76f2\u5340\u3002\u8a31\u591a\u958b\u767c\u8005\u8aa4\u4ee5\u70ba\u5c07\u8b8a\u6578\u8a2d\u70ba\u79c1\u6709\u5373\u53ef\u96b1\u85cf\u8cc7\u8a0a\uff0c\u4f46\u5be6\u969b\u4e0a\u9019\u53ea\u80fd\u9650\u5236\u5176\u4ed6\u5408\u7d04\u7684\u547c\u53eb\uff0c\u5b8c\u5168\u7121\u6cd5\u6539\u8b8a\u5340\u584a\u93c8\u5e95\u5c64\u8cc7\u6599\u5168\u7db2\u516c\u958b\u7684\u672c\u8cea\u3002\u9019\u9053\u984c\u76ee\u5e36\u7d66\u958b\u767c\u8005\u6700\u91cd\u8981\u7684\u8cc7\u5b89\u6559\u8a13\u662f\uff0c\u7d55\u5c0d\u4e0d\u53ef\u5c07\u5bc6\u78bc\u3001\u79c1\u9470\u7b49\u4efb\u4f55\u654f\u611f\u8cc7\u6599\u4ee5\u660e\u6587\u5f62\u5f0f\u5beb\u5165\u667a\u80fd\u5408\u7d04\u4e2d\uff0c\u6240\u6709\u4e0a\u93c8\u7684\u8cc7\u6599\u90fd\u61c9\u8996\u70ba\u5b8c\u5168\u516c\u958b\u3002<\/p>\n\n\n\n

\u984c\u76ee\u4f4d\u7f6e\uff1ahttps:\/\/ethernaut.openzeppelin.com\/level\/8<\/a><\/p>\n\n\n\n

\n\n\n\n

\u984c\u76ee\u8aaa\u660e<\/h2>\n\n\n\n

\u9019\u95dc\u6703\u7d66\u4f60\u4e00\u500b\u540d\u70ba Vault<\/code> \u7684\u667a\u80fd\u5408\u7d04\u5be6\u4f8b\uff08\u4f60\u53ef\u4ee5\u628a\u5b83\u60f3\u50cf\u6210\u4e00\u500b\u6578\u4f4d\u4fdd\u96aa\u7bb1\uff09\u3002\u4f60\u7684\u552f\u4e00\u76ee\u6a19\u662f\uff1a\u89e3\u9396\u9019\u500b\u4fdd\u96aa\u7bb1\u3002 \u5177\u9ad4\u4f86\u8aaa\uff0c\u5c31\u662f\u60f3\u8fa6\u6cd5\u5c07\u5408\u7d04\u88e1\u9762\u7684\u72c0\u614b\u8b8a\u6578 locked<\/code> \u5f9e\u9810\u8a2d\u7684 true<\/code>\uff08\u4e0a\u9396\uff09\u8b8a\u6210 false<\/code>\uff08\u89e3\u9396\uff09\u3002<\/p>\n\n\n\n

\u5408\u7d04\u5167\u5bb9\u5982\u4e0b\uff1a<\/p>\n\n\n\n

\/\/ SPDX-License-Identifier: MIT\npragma solidity ^0.8.0;\n\ncontract Vault {\n    bool public locked;\n    bytes32 private password;\n\n    constructor(bytes32 _password) {\n        locked = true;\n        password = _password;\n    }\n\n    function unlock(bytes32 _password) public {\n        if (password == _password) {\n            locked = false;\n        }\n    }\n}<\/code><\/pre>\n\n\n\n
\n\n\n\n
\u4ee3\u78bc\u89e3\u8aaa<\/strong><\/h2>\n\n\n\n
1. \u72c0\u614b\u8b8a\u6578 (State Variables)<\/h3>\n\n\n\n
\u9019\u662f\u5408\u7d04\u7528\u4f86\u5132\u5b58\u8cc7\u6599\u7684\u5730\u65b9\uff0c\u8cc7\u6599\u6703\u6c38\u4e45\u8a18\u9304\u5728\u5340\u584a\u93c8\u4e0a\u3002<\/p>\n\n\n\n
    \n
  • bool public locked;<\/code><\/strong>\uff1a\u5ba3\u544a\u4e00\u500b\u5e03\u6797\u503c\uff08\u53ea\u6709 true \u6216 false\uff09\uff0c\u7528\u4f86\u4ee3\u8868\u4fdd\u96aa\u7bb1\u7684\u958b\u95dc\u72c0\u614b\u3002\u8a2d\u5b9a\u70ba public<\/code>\uff0c\u6240\u4ee5\u4efb\u4f55\u4eba\u90fd\u53ef\u4ee5\u96a8\u6642\u67e5\u770b\u5b83\u73fe\u5728\u662f\u4e0d\u662f\u9396\u8457\u7684\u3002<\/li>\n\n\n\n
  • bytes32 private password;<\/code><\/strong>\uff1a\u5ba3\u544a\u4e00\u500b 32 bytes \u7684\u8b8a\u6578\u4f86\u5b58\u653e\u5bc6\u78bc\u3002\u4f5c\u8005\u523b\u610f\u52a0\u4e0a private<\/code>\uff08\u79c1\u6709\uff09\u3002<\/li>\n<\/ul>\n\n\n\n
    2. \u5efa\u69cb\u5b50 (Constructor)<\/h3>\n\n\n\n
      \n
    • constructor(bytes32 _password)<\/code><\/strong>\uff1a\u9019\u6bb5\u7a0b\u5f0f\u78bc\u53ea\u6703\u5728\u5408\u7d04\u300c\u8a95\u751f\uff08\u90e8\u7f72\u5230\u5340\u584a\u93c8\u4e0a\uff09\u300d\u7684\u90a3\u4e00\u77ac\u9593\u57f7\u884c\u4e00\u6b21\uff0c\u4e4b\u5f8c\u5c31\u6c38\u9060\u4e0d\u80fd\u518d\u88ab\u547c\u53eb\u3002<\/li>\n\n\n\n
    • \u90e8\u7f72\u9019\u500b\u5408\u7d04\u7684\u4eba\uff0c\u6703\u5728\u90e8\u7f72\u6642\u50b3\u5165\u4e00\u7d44\u81ea\u5df1\u8a2d\u5b9a\u7684\u5bc6\u78bc\uff08_password<\/code>\uff09\u3002<\/li>\n\n\n\n
    • \u5408\u7d04\u4e00\u5efa\u7acb\uff0c\u5c31\u6703\u7acb\u523b\u628a locked<\/code> \u8a2d\u70ba true<\/code>\uff08\u4e0a\u9396\uff09\uff0c\u4e26\u628a\u90e8\u7f72\u8005\u50b3\u5165\u7684\u5bc6\u78bc\u5b58\u9032\u5e95\u5c64\u7684 password<\/code> \u8b8a\u6578\u4e2d\u3002<\/li>\n<\/ul>\n\n\n\n
      3. \u89e3\u9396\u51fd\u6578 (Unlock Function)<\/h3>\n\n\n\n
        \n
      • function unlock(bytes32 _password) public<\/code><\/strong>\uff1a\u9019\u662f\u4e00\u500b\u516c\u958b\u7684\u65b9\u6cd5\uff0c\u4efb\u4f55\u4eba\u90fd\u53ef\u4ee5\u547c\u53eb\u5b83\uff0c\u4e26\u5617\u8a66\u8f38\u5165\u5bc6\u78bc\u4f86\u958b\u9396\u3002<\/li>\n\n\n\n
      • if (password == _password)<\/code><\/strong>\uff1a\u5408\u7d04\u6703\u62ff\u4f60\u525b\u525b\u8f38\u5165\u7684\u5bc6\u78bc\uff08_password<\/code>\uff09\uff0c\u53bb\u8ddf\u7576\u521d\u5b58\u5728\u5340\u584a\u93c8\u5e95\u5c64\u7684\u5bc6\u78bc\uff08password<\/code>\uff09\u505a\u6bd4\u5c0d\u3002<\/li>\n\n\n\n
      • locked = false;<\/code><\/strong>\uff1a\u5982\u679c\u5169\u8005\u5b8c\u5168\u4e00\u6a23\uff0c\u689d\u4ef6\u6210\u7acb\uff0c\u4fdd\u96aa\u7bb1\u72c0\u614b\u5c31\u6703\u88ab\u6539\u6210 false<\/code>\uff08\u89e3\u9396\uff09\u3002\u9019\u5c31\u662f\u4f60\u525b\u624d\u6210\u529f\u89f8\u767c\u7684\u6700\u5f8c\u4e00\u6b65\u3002<\/li>\n<\/ul>\n\n\n\n
        \n\n\n\n
        \u6f0f\u6d1e\u5206\u6790<\/strong><\/h2>\n\n\n\n
        \u7576\u4f60\u5c07\u8b8a\u6578\u8a2d\u70ba private<\/code>\uff0c\u9019\u53ea\u662f Solidity \u7de8\u8b6f\u5668\u5c64\u7d1a\u7684\u4fdd\u8b77\u6a5f\u5236\u3002\u5b83\u552f\u4e00\u7684\u4f5c\u7528\u662f\uff1a\u7981\u6b62\u5176\u4ed6\u667a\u80fd\u5408\u7d04\u900f\u904e\u5408\u7d04\u7a0b\u5f0f\u78bc\u76f4\u63a5\u547c\u53eb\u4e26\u8b80\u53d6\u9019\u500b\u8b8a\u6578\u3002 \u4f8b\u5982\uff0c\u5408\u7d04 B \u7121\u6cd5\u5beb\u51fa \u5408\u7d04A.password()<\/code> \u9019\u6a23\u7684\u7a0b\u5f0f\u78bc\u4f86\u7372\u53d6\u5bc6\u78bc\uff0c\u7de8\u8b6f\u5668\u5728\u7de8\u8b6f\u968e\u6bb5\u5c31\u6703\u76f4\u63a5\u5831\u932f\u963b\u6b62\u3002<\/p>\n\n\n\n
        \u4ee5\u592a\u574a\u662f\u4e00\u500b\u516c\u958b\u7684\u5e33\u672c\uff08Public Ledger\uff09\u3002\u6240\u6709\u7684\u4ea4\u6613\u7d00\u9304\u3001\u667a\u80fd\u5408\u7d04\u7684\u7a0b\u5f0f\u78bc\uff0c\u4ee5\u53ca\u5408\u7d04\u7576\u4e0b\u7684\u6240\u6709\u72c0\u614b\uff08State Variables\uff09\uff0c\u90fd\u5fc5\u9808\u516c\u958b\u540c\u6b65\u4e26\u5132\u5b58\u5728\u6bcf\u4e00\u500b\u4ee5\u592a\u574a\u7bc0\u9ede\u7684\u786c\u789f\u4e2d\u3002 \u56e0\u70ba\u8cc7\u6599\u5c31\u5b58\u5728\u6240\u6709\u7bc0\u9ede\u7684\u516c\u958b\u8cc7\u6599\u5eab\u88e1\uff0c\u4efb\u4f55\u4eba\u90fd\u53ef\u4ee5\u7e5e\u904e\u667a\u80fd\u5408\u7d04\u7684\u7a0b\u5f0f\u78bc\u9650\u5236\uff0c\u76f4\u63a5\u5411\u5340\u584a\u93c8\u7bc0\u9ede\u67e5\u8a62\u300c\u7279\u5b9a\u8a18\u61b6\u9ad4\u4f4d\u7f6e\uff08Storage Slot\uff09\u300d\u88e1\u5b58\u653e\u7684\u539f\u59cb\u8cc7\u6599\u3002<\/p>\n\n\n\n
        \u4ee5\u592a\u574a\u667a\u80fd\u5408\u7d04\u7684\u5132\u5b58\u69fd\uff08Storage Slot\uff09\u662f\u4f9d\u5e8f\u6392\u5217\u7684\uff0c\u6bcf\u500b\u69fd\u7684\u5bb9\u91cf\u70ba 32 bytes\uff08256 bits\uff09\uff1a<\/p>\n\n\n\n
          \n
        • Slot 0<\/strong>: \u5132\u5b58\u4e86\u7b2c\u4e00\u500b\u8b8a\u6578 locked<\/code>\u3002<\/li>\n\n\n\n
        • Slot 1<\/strong>: \u5132\u5b58\u4e86\u7b2c\u4e8c\u500b\u8b8a\u6578 password<\/code>\u3002\u5373\u4f7f\u5b83\u88ab\u6a19\u793a\u70ba private<\/code>\uff0c\u9019\u4e9b\u4f4d\u5143\u7d44\u4f9d\u7136\u5be6\u5be6\u5728\u5728\u5730\u5beb\u5165\u4e26\u5132\u5b58\u5728\u5340\u584a\u93c8\u7684\u7b2c 1 \u865f\u5132\u5b58\u69fd\u4e2d\u3002<\/li>\n<\/ul>\n\n\n\n
          \n\n\n\n
          \u89e3\u7b54\u6b65\u9a5f<\/h2>\n\n\n\n
          1.\u8b80\u53d6\u5bc6\u78bc <\/h3>\n\n\n\n
          \u53ea\u9700\u8981\u6253\u958b\u700f\u89bd\u5668\u7684\u958b\u767c\u8005\u63a7\u5236\u53f0\uff0c\u4f7f\u7528 Web3.js \u63d0\u4f9b\u7684\u5340\u584a\u93c8\u5e95\u5c64 API getStorageAt<\/code>\uff0c\u76f4\u63a5\u8b80\u53d6\u5408\u7d04\u5730\u5740\u4e0a\u7684\u7b2c 1 \u865f\u5132\u5b58\u69fd\uff1a<\/p>\n\n\n\n
          > web3.eth.getStorageAt(instance, 1).then(web3.utils.toAscii)\n...omit...\nA very strong secret password :)\n...omit...\n\n> web3.eth.getStorageAt(instance, 1, console.log)\n...omit...\n0x412076657279207374726f6e67207365637265742070617373776f7264203a29\n...omit...<\/code><\/pre>\n\n\n\n
          \u88dc\u5145\u8aaa\u660e\uff1a\u5176\u5be6 web3.eth.getStorageAt<\/code> \u53ea\u662f Web3.js \u5e6b\u4f60\u5305\u88dd\u597d\u7684\u8a9e\u6cd5\u3002\u5728\u4ee5\u592a\u574a\u7bc0\u9ede\u5e95\u5c64\u7684 JSON-RPC \u5354\u8b70\u4e2d\uff0c\u672c\u4f86\u5c31\u6709\u4e00\u500b\u516c\u958b\u7684\u6a19\u6e96\u65b9\u6cd5\u53eb\u505a eth_getStorageAt<\/code>\u3002\u53bb\u7ffb\u95b1 Web3.js \u7684 API \u624b\u518a\u627e\u5c0b\u5c0d\u61c9\u7684\u529f\u80fd\uff0c\u5c31\u53ef\u4ee5\u627e\u5230\u3002 <\/p>\n\n\n\n
          2.\u5c07\u5bc6\u78bc\u586b\u5165<\/h3>\n\n\n\n
          > await contract.unlock(\"0x412076657279207374726f6e67207365637265742070617373776f7264203a29\") <\/code><\/pre>\n\n\n\n
          3.\u6aa2\u67e5\u5bc6\u78bc\u662f\u5426\u6b63\u78ba <\/h3>\n\n\n\n
          \u57f7\u884c\u4ee5\u4e0b\u6307\u4ee4\uff0c\u5982\u679c\u662f false \u8868\u793a\u6210\u529f<\/p>\n\n\n\n
          > await contract.locked()\nfalse  <\/code><\/pre>\n\n\n\n
          \u88dc\u5145\u8aaa\u660e\uff1a\u96d6\u7136\u539f\u59cb\u78bc\u88e1\u6c92\u6709\u770b\u5230 function locked()<\/code>\uff0c\u4f46\u5176\u5be6 Solidity \u7de8\u8b6f\u5668\u81ea\u52d5\u5e6b\u4f60\u52a0\u4e0a\u53bb\u4e86\u3002\u5728 Solidity \u8a9e\u8a00\u4e2d\uff0c\u6709\u4e00\u500b\u975e\u5e38\u91cd\u8981\u7684\u7279\u6027\uff1a\u53ea\u8981\u4f60\u5c07\u72c0\u614b\u8b8a\u6578\u5ba3\u544a\u70ba public<\/code>\uff0c\u7de8\u8b6f\u5668\u5c31\u6703\u5728\u80cc\u5f8c\u81ea\u52d5\u70ba\u9019\u500b\u8b8a\u6578\u751f\u6210\u4e00\u500b\u540c\u540d\u7684\u300c\u8b80\u53d6\u51fd\u6578\uff08Getter Function\uff09\u300d\u3002<\/p>\n\n\n\n
          \u63db\u53e5\u8a71\u8aaa\uff0c \u7576\u5408\u7d04\u4e2d\u6709 bool public locked; <\/code>\uff0c\u7de8\u8b6f\u5668\u5728\u7de8\u8b6f\u6210\u4f4d\u5143\u7cd5\uff08Bytecode\uff09\u6642\uff0c\u6703\u5077\u5077\u5e6b\u5408\u7d04\u52a0\u4e0a\u985e\u4f3c\u4ee5\u4e0b\u7684\u7a0b\u5f0f\u78bc<\/p>\n\n\n\n
          function locked() public view returns (bool) {\n    return locked;\n}<\/code><\/pre>\n\n\n\n
          <\/p>\n","protected":false},"excerpt":{"rendered":"
          \u9019\u4e00\u95dc\u7684\u6838\u5fc3\u65e8\u5728\u63ed\u793a Solidity \u4e2d private \u4fee\u98fe\u7b26\u7684\u5b89\u5168\u76f2\u5340\u3002\u8a31\u591a\u958b\u767c\u8005\u8aa4\u4ee5\u70ba\u5c07\u8b8a\u6578\u8a2d\u70ba\u79c1\u6709\u5373\u53ef\u96b1\u85cf\u8cc7\u8a0a\uff0c\u4f46\u5be6\u969b\u4e0a\u9019\u53ea\u80fd\u9650\u5236\u5176\u4ed6\u5408\u7d04\u7684\u547c\u53eb\uff0c\u5b8c\u5168\u7121\u6cd5\u6539\u8b8a\u5340\u584a\u93c8\u5e95\u5c64\u8cc7\u6599\u5168\u7db2\u516c\u958b\u7684\u672c\u8cea\u3002<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"fifu_image_url":"","fifu_image_alt":"","_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[371],"tags":[],"class_list":["post-3298","post","type-post","status-publish","format-standard","hentry","category-blockchain-security"],"jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":2791,"url":"https:\/\/systw.net\/note\/archives\/2791","url_meta":{"origin":3298,"position":0},"title":"Solidity\u8a9e\u6cd5\u6307\u5357","author":"raymond","date":"2025 \u5e74 9 \u6708 7 \u65e5","format":false,"excerpt":"Solidity \u662f\u7528\u65bc\u7de8\u5beb\u4ee5\u592a\u574a\u667a\u80fd\u5408\u7d04\u7684\u9ad8\u7d1a\u7a0b\u5f0f\u8a9e\u8a00\uff0c\u8a9e\u6cd5\u985e\u4f3c JavaScript\uff0c\u5c08\u70ba\u4ee5\u592a\u574a\u2026","rel":"","context":"\u5728\u300cSmart Contract\u300d\u4e2d","block_context":{"text":"Smart Contract","link":"https:\/\/systw.net\/note\/archives\/category\/%e5%8d%80%e5%a1%8a%e9%8f%88\/smart-contract-develop"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2546,"url":"https:\/\/systw.net\/note\/archives\/2546","url_meta":{"origin":3298,"position":1},"title":"Smart Contracts","author":"raymond","date":"2024 \u5e74 8 \u6708 10 \u65e5","format":false,"excerpt":"\u667a\u80fd\u5408\u7d04 Smart Contract\u662f\u4e00\u7a2e\u5132\u5b58\u5728\u5340\u584a\u93c8\u4e0a\u7684\u7a0b\u5f0f\u78bc\uff0c\u5b83\u6703\u81ea\u52d5\u57f7\u884c\u3001\u63a7\u5236\u548c\u8a18\u9304\u5408\u7d04\u689d\u6b3e\u2026","rel":"","context":"\u5728\u300cSmart Contract\u300d\u4e2d","block_context":{"text":"Smart Contract","link":"https:\/\/systw.net\/note\/archives\/category\/%e5%8d%80%e5%a1%8a%e9%8f%88\/smart-contract-develop"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":3317,"url":"https:\/\/systw.net\/note\/archives\/3317","url_meta":{"origin":3298,"position":2},"title":"CTF Re-entrancy","author":"raymond","date":"2025 \u5e74 11 \u6708 11 \u65e5","format":false,"excerpt":"\u9019\u95dc\u7684\u6838\u5fc3\u65e8\u5728\u63ed\u793a Solidity \u4e2d\u6700\u60e1\u540d\u662d\u5f70\u7684\u6f0f\u6d1e\u4e4b\u4e00\uff1a\u91cd\u5165\u653b\u64ca\uff08Re-entrancy\uff09\u3002\u6b77\u2026","rel":"","context":"\u5728\u300cBlockchain Security\u300d\u4e2d","block_context":{"text":"Blockchain Security","link":"https:\/\/systw.net\/note\/archives\/category\/%e5%8d%80%e5%a1%8a%e9%8f%88\/blockchain-security"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":3157,"url":"https:\/\/systw.net\/note\/archives\/3157","url_meta":{"origin":3298,"position":3},"title":"SC Proxy and upgradeability vulnerabilities","author":"raymond","date":"2026 \u5e74 3 \u6708 1 \u65e5","format":false,"excerpt":"\u4ee3\u7406\u8207\u53ef\u5347\u7d1a\u6027\u6f0f\u6d1e\u662f\u6307\uff1a\u7576\u667a\u80fd\u5408\u7d04\u63a1\u7528\u53ef\u5347\u7d1a\u67b6\u69cb\uff0c\u4f46\u5176\u5347\u7d1a\u8def\u5f91\u3001\u521d\u59cb\u5316\u6a5f\u5236\u6216\u7ba1\u7406\u54e1\u63a7\u5236\u6b0a\u8a2d\u8a08\u4e0d\u826f\u6216\u914d\u2026","rel":"","context":"\u5728\u300cBlockchain Security\u300d\u4e2d","block_context":{"text":"Blockchain Security","link":"https:\/\/systw.net\/note\/archives\/category\/%e5%8d%80%e5%a1%8a%e9%8f%88\/blockchain-security"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2542,"url":"https:\/\/systw.net\/note\/archives\/2542","url_meta":{"origin":3298,"position":4},"title":"Solidity and Remix","author":"raymond","date":"2024 \u5e74 8 \u6708 10 \u65e5","format":false,"excerpt":"Solidity \u7684\u904b\u4f5c\u65b9\u5f0f\u53ef\u4ee5\u5206\u89e3\u70ba\u4e09\u500b\u4e3b\u8981\u6b65\u9a5f\uff1a\u7de8\u5beb\u3001\u7de8\u8b6f \u548c \u57f7\u884c\u3002\u958b\u767c\u8005\u80fd\u7528\u4eba\u985e\u80fd\u61c2\u7684\u8a9e\u8a00\u5beb\u2026","rel":"","context":"\u5728\u300cSmart Contract\u300d\u4e2d","block_context":{"text":"Smart Contract","link":"https:\/\/systw.net\/note\/archives\/category\/%e5%8d%80%e5%a1%8a%e9%8f%88\/smart-contract-develop"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2580,"url":"https:\/\/systw.net\/note\/archives\/2580","url_meta":{"origin":3298,"position":5},"title":"SC Lack of Input Validation","author":"raymond","date":"2024 \u5e74 8 \u6708 14 \u65e5","format":false,"excerpt":"\u8f38\u5165\u9a57\u8b49\uff08Input Validation\uff09\u662f\u78ba\u4fdd\u667a\u80fd\u5408\u7d04\u50c5\u8655\u7406\u6709\u6548\u4e14\u9810\u671f\u7684\u8cc7\u6599\u3002\u7576\u667a\u80fd\u5408\u7d04\u672a\u5c0d\u8f38\u5165\u2026","rel":"","context":"\u5728\u300cBlockchain Security\u300d\u4e2d","block_context":{"text":"Blockchain Security","link":"https:\/\/systw.net\/note\/archives\/category\/%e5%8d%80%e5%a1%8a%e9%8f%88\/blockchain-security"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/3298","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/comments?post=3298"}],"version-history":[{"count":6,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/3298\/revisions"}],"predecessor-version":[{"id":3304,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/3298\/revisions\/3304"}],"wp:attachment":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/media?parent=3298"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/categories?post=3298"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/tags?post=3298"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}