<h2 id="header-0"><strong>Background Overview</strong></h2><p>In our<a href="https://slowmist.medium.com/introduction-to-smart-contract-vulnerabilities-reentrancy-attack-2893ec8390a" rel="noopener noreferrer nofollow"> first article</a>, we discussed various methods to prevent reentrancy attacks. One such method involves checking the caller’s identity and disallowing contract invocations to thwart reentrancy. In this installment, we will explore how to identify the caller’s identity using Contract Size Checks.</p><h2 id="header-1">Prerequisite</h2><p>As is commonly known, contracts are written in code. Once deployed, these contracts will certainly have corresponding bytecode at their address. Externally Owned Accounts (EOA) addresses, on the other hand, do not have bytecode. Thus, we can determine whether a caller is a contract simply by checking if there is bytecode at the caller’s address. To do this, we can use the extcodesize() function available in Solidity inline assembly. Let’s go through an example to better understand the actual effect of this function.</p><h2 id="header-2"><strong>Code Example</strong></h2><p>First, let’s use a code snippet to understand the purpose of extcodesize():</p><p><img src="https://miro.medium.com/v2/resize:fit:700/1*8MeLUyw_88aDY0hGVwGFGg.png" /></p><p>After deploying on Remix and calling the Size() function while passing in the Deployer’s EOA (Externally Owned Account) address (0x787…cabaB), we find that it returns 0.</p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*3kPLNxtYi7zJM61K" /></p><p>Upon calling the Size() function again and passing in the contract’s own address (0xC58…905F2), it returns 348.</p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*Y3xitNpOtSrIVx9n" /></p><p>From the above discussion, it’s clear that when the account is an EOA (Externally Owned Account), extcodesize() will return 0. On the other hand, if the account is a contract address, extcodesize() will return the size of the deployed contract’s bytecode. At this point, it should be straightforward to see that you can determine whether an address is an EOA or a deployed contract by calling extcodesize() and checking if the return value is 0. Ah, just like that, we’ve identified a vulnerability.</p><h2 id="header-3"><strong>Vulnerability Example</strong></h2><p><img src="https://miro.medium.com/v2/resize:fit:700/1*4payj-cw3Pr9qqjFbarOhQ.png" /></p><h2 id="header-4"><strong>Vulnerability Analysis</strong></h2><p>We can see that isContract() checks whether the account bytecode is 0 and returns a Boolean value accordingly. The protected() function then modifies the state variable pwned based on the return value of isContract(). However, there is an overlooked aspect here: During contract deployment, the logic inside the constructor function is sent along with the contract deployment transaction to be packaged into a block by miners. Because the contract deployment is not yet complete at this point, the corresponding bytecode has not been stored at the contract address. As a result, calling extcodesize() to check the contract address’s bytecode within the constructor function would return 0. Let’s examine what would be returned under normal invocation:</p><p><img src="https://miro.medium.com/v2/resize:fit:700/1*gdIG808e3Hr_-2PHuJwAnQ.png" /></p><p>Calling pwn() and passing in the contract address 0x058…4c899 results in a revert. This illustrates that after the contract has been deployed, invoking the protected() function will fail the require(!isContract(msg.sender)) check.</p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*UCcbv9Khp9b5puHh" /></p><h2 id="header-5"><strong>Attack Contract</strong></h2><p>Next, let’s try placing the calling logic within the constructor function:</p><p><img src="https://miro.medium.com/v2/resize:fit:700/1*cx58U34LoqWeh-aQEcJQOg.png" /></p><p>Upon deploying the “Hack” contract and passing in the contract address 0xbd7…9EFB3, it was found that the contract successfully bypassed the require(!isContract(msg.sender)) check and successfully modified the state of the pwned variable.</p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*JKS12Lo3SxBMvkl5" /></p><h2 id="header-6">Recommended Fixes</h2><h3 id="strong-for-developers-strong"><strong>For Developers</strong></h3><p>Using extcodesize() to determine whether an address is an EOA (Externally Owned Account) is not foolproof. In practical development, a more reliable way to ascertain the identity of the caller is by using tx.origin, as demonstrated below:</p><p><img src="https://miro.medium.com/v2/resize:fit:700/1*nGJ_Ne6G9Ae9BySibWWJCg.png" /></p><p>Since tx.origin can only be an EOA (Externally Owned Account) address, we simply need to check if the top-level caller’s msg.sender is the same as tx.origin. By doing so, we can ascertain the identity of the caller. Taking the previously mentioned vulnerable code as an example, we only need to make minor adjustments to fix the issue.</p><p><img src="https://miro.medium.com/v2/resize:fit:700/1*2JBAIi9XxxRKwovpkgEuIQ.png" /></p><p>If you deploy the following “Hack” contract and attempt the same attack, it will now be reverted and return the message “no contract allowed.”</p><p><img src="https://miro.medium.com/v2/resize:fit:700/1*ke95C7ZVnehOEVjMQRxbOQ.png" /></p><p><img src="https://miro.medium.com/v2/resize:fit:700/0*IkfKzk6RwXsxvcZv" /></p><h3 id="for-auditors">For Auditors</h3><p>During the auditing process, if you encounter logic that restricts contract address interactions, it’s essential to assess its robustness in the context of the actual business logic. Evaluate whether the checks in place are stringent enough and whether there’s a possibility that they could be bypassed.</p>

Intro to Smart Contract Security Auditing: Comprehensive Guide to Contract Size Checks

Table of Contents

SlowMist

Other articles published on Sep 16, 2023

Stellar Crypto Price Prediction: Will XLM Change the Game In 2023?

Range Protocol Raised $3.75M

XRP Price Analysis for September 16

Insurance, agriculture, and real estate: how asset tokenization is reshaping the status quo

Bitcoin Miner Returns 19.8 BTC in Fees After Paxos Claims Payment Mistake

UBER Stock Price Prediction: Will Uber Price Crash On Monday?

Join our free newsletter for daily crypto updates!