跳到主要内容

私有变量安全性

When developing smart contracts, it's crucial to understand that marking variables as private does not make them confidential. This tutorial explains why private variables are still accessible and provides best practices for handling sensitive information in smart contracts.

In Solidity, the private keyword only prevents other contracts from accessing the variable directly through code. 然而，所有存储在区块链上的数据都是公开可见的，包括私有变量。

考虑这个具有私有变量的简单智能合约：

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

contract PrivateDataExample {
    uint256 private secretNumber;
    
    constructor(uint256 _secret) {
        secretNumber = _secret;
    }
}

While this variable cannot be accessed by other smart contracts, anyone can read its value by directly querying the blockchain storage.

漏洞解释​

The blockchain is a transparent, distributed ledger where all data must be accessible to validators to verify transactions. Private variables are stored in specific storage slots that can be read using web3 libraries or blockchain explorers.

以下是读取私有变量的方法：

import { ethers } from "ethers";

async function readPrivateData(contractAddress) {
    const provider = new ethers.JsonRpcProvider("YOUR_RPC_URL");
    
    // Read storage slot 0 where 'secretNumber' is stored
    const data = await provider.getStorage(contractAddress, 0);
    
    // In v6, formatUnits is a standalone function
    console.log("Secret number:", ethers.formatUnits(BigInt(data), 0));
}

Real-World Implications​

This transparency has led to several security incidents where developers mistakenly stored sensitive information in private variables, thinking they were secure. 常见示例包括：

  • 私钥或种子
  • 身份验证凭证
  • 机密业务逻辑参数

最佳实践​

  1. 切勿将敏感数据存储在链上: 任何需要保密的数据都不应存储在区块链上，即使是私有变量也是如此。

  2. 使用提交-透露模式：对于需要临时隐私的数据：

contract CommitReveal {
    mapping(address => bytes32) private commits;
    
    function commit(bytes32 commitHash) external {
        commits[msg.sender] = commitHash;
    }
    
    function reveal(string calldata solution) external {
        bytes32 commit = commits[msg.sender];
        require(commit == keccak256(abi.encodePacked(solution)), "Invalid solution");
        // Process the revealed solution
    }
}
  1. 使用链下存储: 将敏感数据存储在链下，仅在链上放置哈希值：
contract SecureStorage {
    mapping(bytes32 => bool) private dataHashes;
    
    function storeHash(bytes32 hash) external {
        dataHashes[hash] = true;
    }
    
    function verifyData(string calldata data) external view returns (bool) {
        return dataHashes[keccak256(abi.encodePacked(data))];
    }
}
  1. 使用加密: 如果必须在链上存储敏感数据，请先对其进行加密：
contract EncryptedStorage {
    mapping(address => bytes) private encryptedData;
    
    function storeEncrypted(bytes calldata _encryptedData) external {
        // Store data that was encrypted off-chain
        encryptedData[msg.sender] = _encryptedData;
    }
}

记住：区块链本质上是透明的。 如果您的应用程序需要真正的数据隐私，请仔细考虑区块链存储是否适合该特定数据。