Skip to content

Using smart contracts to verify the content of a webpage, mitigating the risk of connecting a wallet to a website affected by a DNS takeover.

Notifications You must be signed in to change notification settings

0xKoda/verifi-web

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

11 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

URL Hash Storage Contract

Overview

Too many web2 security issues still affect web3. Recently, DNS takeovers have been in the spotlight with velodrome and aerodrome incidents. This repository contains a Solidity smart contract designed to securely store and verify MD5 hashes of websites. In the DeFi space, DNS takeovers pose a significant threat, often leading to users interacting with malicious webpages and potentially losing funds. By storing MD5 hashes of webpages on chain, we create a provable and immutable record that helps when verifying if a webpage is the same as the one deployed by the protocol owner.

For Example:

During the Velodrome incident, the MD5 = 0597d6b768c447f87d43ac8bff96bdaf.

When velodrome regained control, the MD5 = ab479bd6a07b57895e9a252b3f90cc8f.

Getting Started

git clone https://github.com/0xkoda/verifi-web.git
cd verifi-web

Run Tests

forge test

Contributions

Feel free to contribute.

⚠️ Warning

This is a POC and should not be used in production.

About

Using smart contracts to verify the content of a webpage, mitigating the risk of connecting a wallet to a website affected by a DNS takeover.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published