update readme

AmazingAng · Nov 2, 2022 · 011f19f · 011f19f
1 parent 99114b9
commit 011f19f
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 12 deletions.
diff --git a/README.md b/README.md
@@ -134,11 +134,13 @@
 
 **S02：选择器碰撞**：[代码](https://github.com/AmazingAng/WTFSolidity/blob/main/S02_SelectorClash) | [文章](https://github.com/AmazingAng/WTFSolidity/blob/main/S02_SelectorClash/readme.md) | [Mirror](https://mirror.xyz/ninjak.eth/5rwcsBZzphdlKZj4MoIpn8aqwQ1MzQ8qy50ZEGNU_HU)
 
-**S03：中心化风险**：[代码](https://github.com/AmazingAng/WTFSolidity/blob/main/S03_Centralization) | [文章](https://github.com/AmazingAng/WTFSolidity/blob/main/S03_Centralization/readme.md) | [Mirror](https://mirror.xyz/ninjak.eth/0MlTKdaSGD9-A9WIbgbtrDlAazg-8DLpTJv7l8vsq3c)
+**S03：中心化**：[代码](https://github.com/AmazingAng/WTFSolidity/blob/main/S03_Centralization) | [文章](https://github.com/AmazingAng/WTFSolidity/blob/main/S03_Centralization/readme.md) | [Mirror](https://mirror.xyz/ninjak.eth/0MlTKdaSGD9-A9WIbgbtrDlAazg-8DLpTJv7l8vsq3c)
 
-**S04：权限管理漏洞**：[代码](https://github.com/AmazingAng/WTFSolidity/blob/main/S04_AccessControlExploit) | [文章](https://github.com/AmazingAng/WTFSolidity/blob/main/S04_AccessControlExploit/readme.md) | [Mirror](https://mirror.xyz/ninjak.eth/lWnJZJYygZtqe0GFwH6bJg80t2NaSCfdRXCh0EDHxqs)
+**S04：权限管理**：[代码](https://github.com/AmazingAng/WTFSolidity/blob/main/S04_AccessControlExploit) | [文章](https://github.com/AmazingAng/WTFSolidity/blob/main/S04_AccessControlExploit/readme.md) | [Mirror](https://mirror.xyz/ninjak.eth/lWnJZJYygZtqe0GFwH6bJg80t2NaSCfdRXCh0EDHxqs)
 
-**S05：整型溢出漏洞**：[代码](https://github.com/AmazingAng/WTFSolidity/blob/main/S05_Overflow) | [文章](https://github.com/AmazingAng/WTFSolidity/blob/main/S05_Overflow/readme.md) | [Mirror](https://mirror.xyz/ninjak.eth/FCRPHFa5JkCuRVSIrQQubuDPwrAfZctZnjWTaqZpcRU)
+**S05：整型溢出**：[代码](https://github.com/AmazingAng/WTFSolidity/blob/main/S05_Overflow) | [文章](https://github.com/AmazingAng/WTFSolidity/blob/main/S05_Overflow/readme.md) | [Mirror](https://mirror.xyz/ninjak.eth/FCRPHFa5JkCuRVSIrQQubuDPwrAfZctZnjWTaqZpcRU)
+
+**S06：签名重放**：[代码](https://github.com/AmazingAng/WTFSolidity/blob/main/S06_SignatureReplay) | [文章](https://github.com/AmazingAng/WTFSolidity/blob/main/S06_SignatureReplay/readme.md) | [Mirror](https://mirror.xyz/ninjak.eth/hHQO1EGe0vapiejyIrP8bcuPm50Djlse2MareeHLDwE)
 
 ## 主题
 ### `工具`

diff --git a/S06_SignatureReplay/readme.md b/S06_SignatureReplay/readme.md
@@ -18,7 +18,7 @@ tags:
 
 -----
 
-这一讲，我们将介绍智能合约的签名重放（Signature Replay）攻击，它曾间接导致了著名做市商 Wintermute 被盗2000万枚 $OP。
+这一讲，我们将介绍智能合约的签名重放（Signature Replay）攻击和预防方法，它曾间接导致了著名做市商 Wintermute 被盗2000万枚 $OP。
 
 ## 签名重放
 
@@ -108,21 +108,21 @@ contract SigReplay is ERC20 {
 
 ## `Remix` 复现
 
-1. 部署 `SigReplay` 合约，签名者地址 `signer` 被初始化为部署钱包地址。
+**1.** 部署 `SigReplay` 合约，签名者地址 `signer` 被初始化为部署钱包地址。
 
-    ![](./img/S06-2.png)
+![](./img/S06-2.png)
 
-2. 利用`getMessageHash`函数获取消息。
+**2.** 利用`getMessageHash`函数获取消息。
 
-    ![](./img/S06-3.png)
+![](./img/S06-3.png)
 
-3. 点击 `Remix` 部署面板的签名按钮，使用私钥给消息签名。
+**3.** 点击 `Remix` 部署面板的签名按钮，使用私钥给消息签名。
 
-    ![](./img/S06-4.png)
+![](./img/S06-4.png)
 
-4. 反复调用 `badMint` 进行签名重放攻击，铸造大量代币。
+**4.** 反复调用 `badMint` 进行签名重放攻击，铸造大量代币。
 
-    ![](./img/S06-5.png)
+![](./img/S06-5.png)
 
 ## 预防办法