🎄 Join our Annual Holiday wargame and win prizes!


Business logic vulnerability

Logic errors, also known as business logic vulnerabilities, are subtle flaws in smart contracts. They occur when the contract’s code does not match its intended behavior. These errors can manifest in various forms, such as faulty math in reward distribution, improper token minting mechanisms, or incorrect calculations in lending and borrowing logic. Such vulnerabilities are elusive, hiding within the contract’s logic and waiting to be discovered.

Remediation

  • Always validate your code by writing comprehensive test cases that cover all possible business logic scenarios.
  • Conduct thorough code reviews and audits to identify and fix potential logic errors.
  • Document the intended behavior of each function and module, and compare it to the actual implementation to ensure alignment.

Metadata

  • Severity: medium
  • Slug: business-logic-vulnerability

CWEs

  • 682: Incorrect Calculation

OWASP

  • SC03:2025: Logic Errors

Available Labs

Open Move labs in SecDim Play for this vulnerability.

Deco line
Deco line

Play AppSec WarGames

Want to skill-up in secure coding and AppSec? Try SecDim Wargames to learn how to find, hack and fix security vulnerabilities inspired by real-world incidents.

Deco line
Deco line

Got a comment?

Join our secure coding and AppSec community. A discussion board to share and discuss all aspects of secure programming, AppSec, DevSecOps, fuzzing, cloudsec, AIsec code review, and more.

Read more