Hello everyone, thank you for your kindly attention and support again. Last week, all works are carried out perfectly in LianAn Technology. A few big steps have been made, the details are shown as below:
Important News
This week, LianAn Technology teamed up with Scry.INFO. The two parties will start in-depth collaboration in many fields of smart contract such as development, security audit, and formal verification etc… LianAn Technology will also provide smart contract security audit service for Scry.INFO.
Meanwhile, the co-founder of CareerOn, Ran Zhou, discuss the current security situation in the blockchain environment with the core members of LianAn Technology. ‘CareerOn will deploy in-depth cooperation with LianAn Tech in the field of security in the future.’ Says Zhou.
CareerOn is a human resources industry public chain developed based on Ethereum. Its core team is assembled by stock equity and blockchain investment organizations, Alibaba, Tencent, LinkedIn, ChinaHR.com, Liepin.com, The9 and many other leading enterprises and international blockchain organizations.
Vulnerability Analysis
This week, we discovered the problem on the use of constructor function when using VaaS platform to analyse smart contracts. There are 3 contracts which contain this type of vulnerability
For details, please refer to: https://mp.weixin.qq.com/s/xPwhanev-cjHhc104Wmpug
The mis-use of constructor() function will result in:
1. ‘Owner’ permission of the contract could be stolen by users.
2. Users could manage to increase unlimited amount of the token issued if the vulnerability is exploited. Because currently the ERC20 token contract will release the tokens to the owner account during deployment.
LianAn Technology team also offer an integrated analysis for integer overflow/underflow vulnerability. Including 3 types of overflow/underflows: Multiply Overflow, Plus Overflow, Subtract Underflow.
The detailed the analysis has been uploaded to GitHub: https://github.com/Lianantech/VCA
Community Establishment
This week, CEO of LianAn Technology Xia Yang did live streaming on Token Club about “How to ensure the security of blockchain”. Over 15,000 audiences listened to the streaming and a lot of them raised questions about blockchain security, smart contract, security audit etc. Yang answered those questions in-details and received appreciations.
If you happened to miss the streaming, welcome to join us on CSDN at 7pm on next Tuesday, 24th of July, Ms. Yang will give in-depth analysis on ‘Smart Contract Vulnerabilities and precautions’.
About LianAn Technology
Chengdu LianAn Technology Co. Ltd., focusing on blockchain security field, has developed “One-button” formal verification tool called VaaS, which is the first automated blockchain formal verification platform supporting both EOS and Ethereum in the world. As the one and only company which has obtained the strategic investment from Fenbushi Capital on the aspect of blockchain security layout, LianAn Tech has established cooperation with several companies such as Huobi, OKex, KuCoin, Bytom, Bubi Blockchain, and YUNPHANT. LianAn Tech has audited over 500 smart contracts up till now, and was also nominated in the “2018 China Blockchain Industry White Paper” issued by the Ministry of Industry and Information Technology of the People’s republic of China.
E-mail：vaas@lianantech.com
Official website：https://www.lianantech.com
Twitter: https://twitter.com/LianAnTech_com
Facebook: https://www.facebook.com/LianAnTechChengdu/
Telegram Chinese Group：https://t.me/joinchat/IRgNDA4iCF0Rs92sg5qoVg
Telegram English group： https://t.me/joinchat/IRgNDBBpCon-695ATmbA4w
