การเขียนโค้ดอย่างปลอดภัยด้วย SafeMath

In Solidity, integer types like uint256 have a fixed size. This means they can only store numbers up to a certain maximum value and down to a minimum (usually 0 for unsigned integers).

When an arithmetic operation exceeds these limits, it can lead to critical vulnerabilities called integer overflows and underflows.

Solidity's default arithmetic operations (+, -, *, /) do not automatically check for overflows or underflows. Instead, the number 'wraps around'.

This behavior can be exploited by attackers, leading to incorrect token balances, unexpected contract state, and financial losses.

Consider a uint8 variable, which can hold values from 0 to 255. What happens if we try to add 1 to 255? Run this code and call incrementUnsafely(). You'll see the value reset to 0!

Similarly, an underflow occurs when a number goes below its minimum value. For a uint (unsigned integer), the minimum is 0.

If you subtract 1 from 0, it wraps around to the maximum value (255 for uint8, or 2^256 - 1 for uint256).

To prevent these critical errors, we use libraries like SafeMath. SafeMath provides functions for arithmetic operations (addition, subtraction, multiplication, division) that revert the transaction if an overflow or underflow would occur.

This ensures your contract's state remains consistent and secure, preventing malicious exploits.

A Solidity Library is a special type of contract that contains reusable code. Unlike regular contracts, libraries are stateless (they don't store data directly) and cannot hold Ether.

• They are deployed once and their functions are called via DELEGATECALL.
• This means the library's code runs in the context of the calling contract.
• Libraries are perfect for shared utility functions like SafeMath.

To use SafeMath, you typically import it from a trusted source like OpenZeppelin. Then, you tell Solidity to apply SafeMath's functions to a specific integer type using the using A for B; directive.

This makes SafeMath's functions available as member functions on type B.

With SafeMath integrated, you use .add() instead of the standard + operator. If the addition would overflow, the transaction will revert, preventing incorrect state changes.

Call safeAdd() with a value like 10. Try calling it with a value that would cause an overflow (e.g., if total was max uint8 and you added 1).

Similarly, use .sub() for subtraction. This prevents underflows, ensuring that a subtraction operation will revert if the result would be negative (below zero for unsigned integers).

Call safeSubtract() with a value like 10. Try calling it with a value larger than balance (e.g., 101) to see it revert.

SafeMath also provides .mul(), .div(), and .mod() for multiplication, division, and modulo operations, respectively.

• .mul() checks for overflow.
• .div() checks for division by zero and overflow.
• .mod() checks for division by zero.

Always use these safe versions for critical arithmetic in your contracts.

You've learned about the critical vulnerabilities of integer overflows and underflows in Solidity and how SafeMath provides a robust solution.

• Always use SafeMath (or similar audited libraries) for arithmetic operations on unsigned integers in your smart contracts.
• This prevents unexpected behavior and protects your contract's integrity.

Keep practicing secure coding! The next lessons will dive deeper into advanced security patterns.