主页 / user-26626133

ZettaZet YT's questions

Martin Hope
ZettaZet YT
Asked: 2024-08-03 23:36:10 +0800 CST
  • 6

我写了一个 solidity 合约，用于提取合约余额。有人能告诉我它是否有效吗？withdrawSafe应该可以防止重入攻击，但我不知道它是否有效。只需检查一切是否正常，然后请提出改进​​建议。可能会犯一些愚蠢的错误。

// SPDX-License-Identifier: UNLICENSED
pragma solidity >=0.8.19;

event Response(bool success, bytes data);


interface IVault {
    function deposit() external payable;

    function withdrawSafe(address payable holder) external;

    function withdrawUnsafe(address payable holder) external;
}

interface IAttacker {
    function depositToVault(address vault) external payable;

    function attack(address vault) external;
}

contract Vault is IVault {

    bool private _entered;

     modifier nonReentrant {
        require(!_entered, "re-entrant call");
        _entered = true;
        _;
        _entered = false;
    }

    mapping(address => uint256) public balance;

    function deposit() external payable {
        balance[msg.sender] += msg.value;
    }

    function withdrawSafe(address payable holder) external nonReentrant {
        (bool success, bytes memory data) = holder.call{value: balance[msg.sender], gas: 5000}
        (abi.encodeWithSignature("withdrawSafe(string,uint256)", "call WS", 123));
        emit Response(success, data);
    }

    function withdrawUnsafe(address payable holder) external {
        (bool success, bytes memory data) = holder.call{value: balance[msg.sender], gas: 5000}
        (abi.encodeWithSignature("withdrawSafe(string,uint256)", "call WS", 123));
        emit Response(success, data);
    }
}

此外，如果有人知道如何在没有任何测试网或主网链的情况下在 Remix 中测试合约，或者可能推荐另一个 IDE，我会很高兴听到任何建议。

solidity