Sample Smart Contract

Before we begin, let’s setup a sample Smart Contract. Just enough to get something working for us to have a simplistic example.

Create a new file in Remix. I’ve named mine “StartingStopping.sol”, but obviously, you can name your file any way you’d like.

// SPDX-License-Identifier: GPL-3.0
pragma solidity ^0.8.1;
 
contract StartStopUpdateExample {
    function sendMoney() public payable {
 
    }
 
    function withdrawAllMoney(address payable _to) public {
        _to.transfer(address(this).balance);
    }
}

What does it do?

We have two functions:

sendMoney(): This function can receive Ether, it’s a payable function.

withdrawAllMoney(...): Very similar to our previous example, this function will automatically withdraw all available funds stored at the address of the Smart Contract to the variable in the as function argument given address. What a sentence! In other words: It sends all Ether to the “_to” address.

Deploy the Smart Contract

Let’s deploy the Smart Contract to the “JavaScript VM” in Remix. Head over to the “Deploy & Run Transactions” Plugin and hit Deploy:

Perfect! Let’s try to send some Funds around!

Use the Smart Contract

As before, we’re going to:

1. Send Money to the Smart Contract using Account #1
2. Withdraw the Money using any other Account

Already sounds scarily unsecure. If you come from traditional backend development, you should shiver now. But worry not, we’ll get to safe heavens soon!

Alright, so, start by sending some funds to the Smart Contract…

1. Enter 1 Ether into the value field:

2. send it to the “sendMoney” function of your Smart Contract:

3. Select the second Account in the Accounts-Dropdown:

4. Copy the Address:

5. Paste the Address into the “withdrawAllMoney” input field:

6. Click the “withdrawAllMoney” button.

7. Have a look if you have >100 eth in your Account #2 of the Accounts-Dropdown:

So, just to summarize how insecure that is:

1. Someone funded the Smart Contract
2. But everyone can withdraw to any address of their choice?

That sounds pretty bad, right?

We can do better than that!!! In the next exercise we’re going to restrict withdrawals to the person who owns the Smart Contract.

Alright, off to the solution: next page!