A honeypot is a trap set to detect hackers. Reentrancy attack is one of the vulnerabilities that affects decentralized systems badly. To combat such threats, developers employ techniques like honeypots. It functions by luring potential attackers into revealing their tactics so that developers get valuable insights for improving security measures.<h3>&nbsp;</h3><h2>Common Techniques Used in Honeypot</h2><ul><li>Reentrancy Attacks: Tricking a contract into calling malicious external contracts repeatedly. Learn more about this attack from this <a href="https://www.buildbear.io/resources/guides-and-tutorials/Reentrancy_Guard">article</a>.</li><li>Misleading Logic: Using complex logic structures to confuse and indirectly adding malicious code enabling anomalous behavior during execution.</li><li>Hidden Control Structures: Using hidden control structures to manipulate fund flow causes unexpected behavior.</li></ul><h3>&nbsp;</h3><h2>How to protect from Smart Contract Exploitations?</h2><ul><li>Code Review: Continued code review and security audits are essential before deploying any contracts.</li><li>Monitoring Transactions: Analyse contract interactions and notice if there are irregularities, repetitive transactions, and unexpected behavior.</li><li>Verify External contracts: Review external contracts if you are using them and make sure they are valid and free from vulnerabilities.</li><li>Research: Before interacting with any contracts conduct research, code reviews, and community feedback.</li><li>Use reliable sources: Use libraries like Openzeppelin that are verified over time. Such libraries reduce code and logic errors and provide verified best practices.</li><li>Audit contracts: Performing basic security audits will help to identify potential honeypots.</li></ul><h3>&nbsp;</h3><h2>Sample Smart Contract for Demonstration of Attack</h2>By combining two exploits, reentrancy and hiding malicious code, we can build a contract that will catch attackers. Here we will deploy three contracts: a Bank, a Logger, and a Honeypot contract. This Bank contract contains a function to deposit and withdraw Ethers. Logger contracts act as event loggers, recording information about events.&nbsp;Complete smart contract code:<figure class="image image_resized" style="width:50%;"><img src="https://strapi.buildbear.io/uploads/carbon_3_c56498bfeb.png" alt="carbon (3).png" srcset="https://strapi.buildbear.io/uploads/thumbnail_carbon_3_c56498bfeb.png 116w,https://strapi.buildbear.io/uploads/small_carbon_3_c56498bfeb.png 372w,https://strapi.buildbear.io/uploads/medium_carbon_3_c56498bfeb.png 558w,https://strapi.buildbear.io/uploads/large_carbon_3_c56498bfeb.png 745w," sizes="100vw"></figure>The attacker notices these contracts except Honeypot because it is stored in a separate file, code is not visible externally. As the attacker notes the Bank contract is vulnerable to liquidity drainage lacking reentrancy measure in its withdrawal function, and deploys an attack contract that triggers recursive calls to the Bank contract's withdraw function via the Attack contract's fallback function upon receiving ether.<figure class="image image_resized" style="width:50%;"><img src="https://strapi.buildbear.io/uploads/carbon_4_a054ed4bb3.png" alt="carbon (4).png" srcset="https://strapi.buildbear.io/uploads/thumbnail_carbon_4_a054ed4bb3.png 181w,https://strapi.buildbear.io/uploads/small_carbon_4_a054ed4bb3.png 500w,https://strapi.buildbear.io/uploads/medium_carbon_4_a054ed4bb3.png 750w,https://strapi.buildbear.io/uploads/large_carbon_4_a054ed4bb3.png 1000w," sizes="100vw"></figure>Let us build on Scaffold-Eth 2 x Buildbear that lets you create your own private Sandbox, forked for various EVM and EVM-compatible blockchain networks, with your own Token faucet and blockchain explorer. Find the complete project <a href="https://github.com/BuildBearLabs/honeypots">here</a>. Follow the instructions given below:&nbsp;<ul style="list-style-type:circle;"><li>Clone the repository and install dependencies:</li></ul><pre><code class="language-plaintext">git clone https://github.com/BuildBearLabs/honeypots.git
cd honeypots
yarn install
</code></pre><ul style="list-style-type:circle;"><li>Create your private sandbox</li></ul><pre><code class="language-plaintext">yarn fork-bb
</code></pre><ul style="list-style-type:circle;"><li>Copy and paste the smart contracts provided above to the contracts folder inside Hardhat. Also, modify the deployment script. &nbsp;Now deploy smart contracts using the command:</li></ul><pre><code class="language-plaintext">yarn deploy
</code></pre>It will deploy all your contracts and you will get a similar output as given below:<figure class="image image_resized" style="width:75%;"><img src="https://strapi.buildbear.io/uploads/one_e7c0d9f48d.png" alt="one.png" srcset="https://strapi.buildbear.io/uploads/thumbnail_one_e7c0d9f48d.png 245w,https://strapi.buildbear.io/uploads/small_one_e7c0d9f48d.png 500w,https://strapi.buildbear.io/uploads/medium_one_e7c0d9f48d.png 750w,https://strapi.buildbear.io/uploads/large_one_e7c0d9f48d.png 1000w," sizes="100vw"></figure><ul style="list-style-type:circle;"><li>On a second terminal, start your NextJS app:</li></ul><pre><code class="language-plaintext">yarn start
</code></pre>Visit your app on:&nbsp;<code>http://localhost:3000</code>. You can interact with your smart contract using the&nbsp;<code>Debug Contracts</code>&nbsp;page. You will get a screen like this:<figure class="image image_resized" style="width:50%;"><img src="https://strapi.buildbear.io/uploads/two_7304a2bca0.png" alt="two.png" srcset="https://strapi.buildbear.io/uploads/thumbnail_two_7304a2bca0.png 225w,https://strapi.buildbear.io/uploads/small_two_7304a2bca0.png 500w,https://strapi.buildbear.io/uploads/medium_two_7304a2bca0.png 750w,https://strapi.buildbear.io/uploads/large_two_7304a2bca0.png 1000w," sizes="100vw"></figure>Select the Bank contract and deposit some tokens by calling the deposit function. After a successful transaction, it will show like this:<figure class="image image_resized" style="width:50%;"><img src="https://strapi.buildbear.io/uploads/three_edc1e65287.png" alt="three.png" srcset="https://strapi.buildbear.io/uploads/thumbnail_three_edc1e65287.png 184w,https://strapi.buildbear.io/uploads/small_three_edc1e65287.png 500w," sizes="100vw"></figure>Now from the attack contract call the attack function and see if it can utilize the vulnerability.<figure class="image image_resized" style="width:50%;"><img src="https://strapi.buildbear.io/uploads/four_291c694e0b.png" alt="four.png" srcset="https://strapi.buildbear.io/uploads/thumbnail_four_291c694e0b.png 203w,https://strapi.buildbear.io/uploads/small_four_291c694e0b.png 500w," sizes="100vw"></figure>Tada!! Attackers attempt to exploit the vulnerability fails and all the deposits remain locked in Bank contracts. Honeypot neutralizes the attack and turns into a trap for the hacker.&nbsp;<h2>Summarize the process step by step with Alice and Eve:</h2><ul style="list-style-type:square;"><li>Initial Deposit: Alice deposits 10 Ether into the Bank contract.</li><li>Attack Initiation: Eve, the attacker, calls the <code>Attack.attack()</code> function, intending to exploit a reentrancy vulnerability in the Bank contract.</li><li>Deposit and Withdraw: Within the <code>attack()</code> function, Eve first deposits 1 Ether into the Bank contract and then immediately calls the Bank's <code>withdraw()</code> function to retrieve the just-deposited 1 Ether.</li><li>Reentrancy Exploitation: When the Bank contract sends 1 Ether back to the Attack contract without a receive function, it triggers the fallback function in the Attack contract. This fallback function recursively calls the Bank contract's <code>withdraw()</code> function until all of Alice's 10 Ethers are drained to the Attack contract.</li><li>Logger Object Manipulation: When Alice deployed the Bank contract, the <code>_logger</code> parameter in the constructor was set to the address of the HoneyPot contract instead of the real Logger contract. Despite the identical interfaces of the Logger and HoneyPot contracts, the Bank contract interacts with the HoneyPot contract.</li><li>Log Function Execution: The Bank contract executes <code>logger.log(msg.sender, _amount, "Withdraw");</code>, which is actually invoking the <code>log()</code> &nbsp;function of the HoneyPot contract.</li><li>Trap Activation: The HoneyPot's <code>log()</code> function detects the string "Withdraw" passed from the Bank contract and executes <code>revert("It's a trap");</code>, effectively reverting all transactions.</li><li>Transaction Rollback: Due to the revert, all transactions within the Bank's <code>withdraw()</code> function call are rolled back. This means neither Alice's deposited Ether nor Eve's deposited Ether is accessible.</li><li>Outcome: Eve's attempt to exploit the reentrancy vulnerability fails, and both Alice's and Eve's Ether remain locked in the Bank contract, effectively neutralizing the attack and turning it into a trap for the attacker.</li></ul><h2>&nbsp;BuildBear Tips:</h2>Web3 Code Snippets:&nbsp; BuildBear generates tailored code snippets for popular libraries such as Web3.js, Ethers, Wagmi, Web3j, and Web3py, customized to your Sandbox.&nbsp;One-click Deployment:&nbsp; Effortlessly deploy 30+ of the most-used contracts with just a single click using BuildBear's no-code deployment feature.Contract Verification: &nbsp;Configure your Hardhat or Foundry projects with ease to deploy and verify contracts, using BuildBear-generated config file snippets.&nbsp;<h2>About BuildBear:</h2><a href="https://www.buildbear.io/">BuildBear</a>&nbsp;is a platform tailored for DApp development and testing. Developers gain the freedom to construct a personalized Private Testnet sandbox across various blockchain networks. The liberty to mint unlimited Native and ERC20 tokens and rapid transaction times on BuildBear (under 3 seconds!) enhances the DApp development lifecycle manifold. The platform comes equipped with tools designed for real-time testing and debugging, ensuring developers can keep tabs on intricate blockchain transactions with unparalleled ease.Connect with us on&nbsp;<a href="https://twitter.com/_BuildBear">Twitter</a>&nbsp;|&nbsp;<a href="https://www.linkedin.com/company/build-bear/">LinkedIn</a>&nbsp;|&nbsp;<a href="https://t.me/Web3_dApp_Developers">Telegram</a>&nbsp;|&nbsp;<a href="https://github.com/BuildBearLabs">GitHub</a>Author:&nbsp;<a href="https://www.linkedin.com/in/sanamummer/">Sana</a>

honey.png

A honeypot is a trap set to detect hackers. To combat threats, developers employ techniques like honeypots. It functions by luring potential attackers into revealing their tactics so that developers get valuable insights for improving security measures.

A Practical Guide on Honeypot Attacks in Smart Contracts

BUILDBEAR // TUTORIALS

A Practical Guide on Honeypot Attacks in Smart Contracts

Let’s get started then, Shall we?

Let’s get started then, Shall we?

Test DApps at Scale.