Withdrawal patterns in Blockchain / Solidity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a withdrawal pattern in blockchain smart contracts?

A withdrawal pattern is a design approach where users request to withdraw funds, and the contract lets them pull their funds later, instead of sending funds directly during a transaction. This helps avoid security issues like reentrancy attacks.

beginner

Why is the withdrawal pattern safer than sending funds directly in a smart contract?

Because it separates the action of requesting funds from the actual transfer, it prevents attackers from repeatedly calling the contract during a transfer (reentrancy), which can drain funds.

beginner

In the withdrawal pattern, what is the typical flow for a user to get their funds?

First, the user calls a function to record how much they can withdraw. Then, they call a separate function to actually withdraw their funds, which sends the money safely.

intermediate

What is a reentrancy attack and how does the withdrawal pattern help prevent it?

A reentrancy attack happens when a malicious contract calls back into the vulnerable contract before the first call finishes, causing repeated withdrawals. The withdrawal pattern avoids this by updating balances before sending funds, stopping repeated calls.

intermediate

Give a simple example of a withdrawal pattern in Solidity.

A contract stores user balances. When a user wants to withdraw, the contract sets their balance to zero first, then sends the funds. This order stops reentrancy attacks.

What is the main benefit of using a withdrawal pattern in smart contracts?

A Prevents reentrancy attacks by separating withdrawal requests from fund transfers

B Makes transactions faster by sending funds immediately

C Allows unlimited withdrawals without checks

D Automatically refunds gas fees

The withdrawal pattern prevents reentrancy attacks by letting users withdraw funds separately, avoiding direct fund transfers during other contract calls.

In a withdrawal pattern, when are user balances updated?

A After sending funds

B Only when the contract owner approves

C Balances are never updated

D Before sending funds

User balances are updated before sending funds to prevent attackers from withdrawing multiple times.

Which attack does the withdrawal pattern primarily protect against?

A Phishing attack

B Reentrancy attack

C Sybil attack

D 51% attack

The withdrawal pattern is designed to protect against reentrancy attacks.

What happens if a contract sends funds directly without using a withdrawal pattern?

A It saves gas fees

B It is always safe

C It can be vulnerable to reentrancy attacks

D It prevents all attacks

Sending funds directly can allow attackers to exploit reentrancy vulnerabilities.

Which of these is a key step in implementing a withdrawal pattern?

A Update user balance to zero before sending funds

B Send funds first, then update balances

C Allow users to withdraw funds without recording balances

D Disable withdrawals completely

Updating the user balance to zero before sending funds is essential to prevent reentrancy.

Explain the withdrawal pattern and why it is important in smart contract security.

Think about how withdrawing funds safely can stop attackers from stealing money repeatedly.

Describe the steps a smart contract takes when a user withdraws funds using the withdrawal pattern.

Focus on the order of operations to keep funds safe.