Blockchain & Web3
Web3 Security
6 practice questions. Free questions open a full answer guide; the rest unlock with Pro.
- What are the main security risks of using an upgradeable proxy pattern for a smart contract, and how do you mitigate them?
- Why are cross-chain bridges repeatedly the largest exploits in the space, and what does the trust model of a lock-and-mint bridge tell you about where to harden it?Go Pro
- Why are ERC-20 token approvals a major attack surface in Web3, and what would you tell users and build into a dapp to reduce the risk?Go Pro
- When a dApp asks you to approve a token before a swap, what exactly are you granting, and why is approving an unlimited amount risky?Go Pro
- A user signs an off-chain message on a dApp and their entire wallet is drained moments later with no obvious transaction. How does signature-based approval phishing work, and how would you reduce its blast radius in a protocol or wallet you build?Go Pro
- Why is reading a token's price straight from a single DEX pool a dangerous way to feed a smart contract, and how do oracles defend against price manipulation?Go Pro
Want questions matched to your role? Paste a job title, job description, or CV for a personalized set, or go Pro to unlock the full bank.