Скачать или смотреть Nimbus Eth2 | Technical Walkthrough

Explore the Nimbus ETH2 Technical Walkthrough, a detailed session diving into the architecture and security aspects of the Nimbus consensus client. This video covers key features such as the gossip protocol, REST API, and the trusted vs. untrusted codebase boundaries. It examines vulnerabilities like DoS attacks, expensive REST calls, and unbounded buffers, and explores the challenges in exploiting gossip validation, cryptographic components, and beacon node mechanisms. Gain insights into Nimbus' design philosophy, known vulnerabilities, and approaches to hardening its attack surfaces.

Timestamps:
0:00 Introduction
0:45 Overview
2:07 Gossip Layer: Untrusted Gateway to the Network
2:40 REST API: Trusted Surface with Potential Weaknesses
4:45 Trusted vs. Untrusted Codebase Layers
16:00 Historical Audits: Insights and Unresolved Challenges
36:36 Nim Language and C Compilation: Unique Security Challenges
36:05 Closing Statements

🔗 Related Resources:
Nimbus Repository: https://github.com/status-im/nimbus-eth2
Nimbus Documentation: https://nimbus.guide

Join the Ethereum Attackathon for a chance to earn rewards from a $1.5M prize pool:
https://immunefi.com/academy/ethereum...