rising3월 19일· 2 sources

EIP-1153 Transient Storage Security Traps: How a Gas Optimization Killed SIR.trading and What Your Reentrancy Guard Is Missing

EIP-1153 Transient Storage의 보안 함정: 가스 최적화가 SIR.trading을 무너뜨린 방법과 재진입 가드의 사각지대

Why it matters

EIP-1153 introduced TSTORE/TLOAD opcodes as gas-efficient alternatives to SSTORE/SLOAD, but their mid-transaction persistence across internal calls, callbacks, and reentrant calls creates critical security gaps. The SIR.trading protocol lost $355K in March 2025 due to an uncleared transient storage slot, and the low 100-gas cost of TSTORE breaks the long-standing assumption that 2,300 gas stipends prevent reentrancy attacks. Developers treating transient storage as a simple cheap replacement for persistent storage risk exposing contracts to novel attack vectors including low-gas reentrancy and cross-contract state coordination.

2
Sources
+0
24h
Growth
182d
Active
account abstractiondefieip-1153owasp smart contract top 10reentrancysir.tradingsoliditytransient storagetstore

Sources

Related Issues