SESSION

Decentralized finance began to flourish in the second half of 2020, and information security incidents broke out one after another, mainly related to code security. At present, the technology of various DeFi protocols is not yet mature, and some potential risks at different application levels cannot be discovered during security audits. In the future, there will be more unknown attacks combining vulnerabilities of different protocols. In December 2020, the SCSVS smart contract security standard has established the fourteenth graded item: DeFi, which can be used to check the upcoming contract. This research intends to use the current attack process of various common DeFi projects to analyze the vulnerabilities, including flash loans, oracles, governance projects, etc., and provide smart contract security writing or solutions for cases, so that decentralized financial projects can be more intelligent The contract part can fundamentally slow down attacks from outside.