In signed int, the LMB (leftmost bit) represents the sign of the number and thus signed int.

int: signed integers - both positive and negative numbers ranging from -2²⁵⁵ to (2²⁵⁵ - 1).

uint: unsigned integers - positive numbers ranging from 0 to (2²⁵⁶ - 1).

There are two types of integers in Solidity : One such case is arithmetic and a problem associated with it is that an integer overflow can occur in such code. In Solidity, you can perform many different operations with numbers. Solidity’s compiler compiles the contracts to EVM byte codes that can be deployed to Ethereum’s network. Solidity is a high-level programming language that can develop smart contracts. These byte codes are complicated for a human to read, so usually they are a product of a compilation process from a high-level programming language like Java, or in our case Solidity. The code of a contract consists of byte codes, somewhat similar to Java’s JVM and byte codes. The size of every slot in the EVM data structure (stack/memory/storage) is 32 Bytes or 256 bits. Then, it executes the called code and stores the changes to the storage. It starts by getting the contract’s context, the immutable code, and the persistent storage. EVM is a component of the node that is responsible for executing transactions. The miner uses an Ethereum node such as ‘geth’ to interact with the Ethereum network. Once a potential block miner pulls this transaction from the transaction pool, he executes the transaction using the Ethereum Virtual Machine (EVM). When a user or a contract wants to interact with a contract on the Ethereum network, it creates a transaction that invokes some functionality of the called contract code and sends it to the network.

Smart Contract - an entity that has a code and persistent storage.

User (EOA) - Externally Owned Account which is also called a wallet.

There are two types of entities on the Ethereum network: Therefore, only the 256 RMB (rightmost bits) are stored in the storage, and everything else is ignored.Īs a result, the value that is actually stored is 0x00…000 (0), this is an integer overflow. But the slot of the integer value in the storage can only have 256 bits. It consists of one followed by 256 zeroes (b100…000), which in total has a length of 257 bits.

The result of this arithmetic addition is a number that is greater than the maximum possible integer. B = 0xFF…FFF (2²⁵⁶ - 1, Max unsigned value).

Let’s say you want to perform an arithmetic addition between 2 legitimate but unsigned integers: In Ethereum, every unsigned int slot in the storage is 32 Bytes or 256 bits. Well, if there is a limit to the size of numbers in computers, what happens when we cross this limit? This can be also calculated by 2³² - 1, which is all possible combinations of 0’s and 1’s of length 32, minus 1 because computers start counting from 0. 0xFFFFFFFF (decimal 4294967295) - is the maximum value of unsigned int.0x00000000 (decimal 0) - is the minimum value of unsigned int.Thus, we can deduce that in such languages: 0x0000000F (Binary: b00…001111) - is a binary/hex representation of the decimal value 15.An int type declares that the maximum value length that can be stored in a specific slot is 4 Bytes or 32 bits (each Byte consists of 8 bits). In languages like C and Java, these can be represented by multiple types for numbers like ‘int’, ‘short’, ‘double’, etc. In many programming languages, every storage slot has a type that defines what kind of information is stored within it, and what the maximum capacity of the specific slot is. Sometimes, these values are represented in hexadecimal, which is a 16-based number system, with a ‘0x’ prefix. In addition, computers don’t understand human languages, so the data is represented in binary, a 2-based number system, which consists of 0’s and 1’s. There is an infinite amount of numbers between -∞ and ∞, but our computers have a finite capacity of storage, so there is a limit on how large or small numbers we can store. This article will focus on integer overflow, although other overflows (like buffer overflow) exist. Modern computers store data from different types like numbers, text, etc. Enjoys collecting Pokémon cards and bobble-heads of rappers Specializes in Machine Learning and Big Data, and is extremely passionate about Cybersecurity, Blockchain and Algo-trading. Has an MSc in Information and Software Systems and Engineering from Ben-Gurion University. Mark Yosef - Security Researcher and Data Scientist at Valid Network.

Integer overflow attack