News for hackers. Stuff that matters.

A comment on XSS Attack Embedded in an ERC20 Token Contract Steals Thousands. Parent comment

Re:XSS Attack Embedded in an ERC20 Token Contract Steals Tho... by detailyang on Thursday September 28, 2017 @02:53AM (#15355220)
the etherdelta owner can change the js code then send you founds to faker contract:)
[ Parent | on HN ]
Re:XSS Attack Embedded in an ERC20 Token Contract Steals Tho... by AgentME on Thursday September 28, 2017 @03:23AM (#15355380)
The contract address is shown in the Mist/MetaMask prompt. Checking that when you first deposit would be sufficient. (Sure, it's probably true that many users would fail to check that, but I think it counts for something that there is an obvious way that anyone could verify what they were committing their funds to.)
[ Parent | on HN ]