CBSE DeFi and Token Security 2

Question 1

What is a 'rug pull' in the context of DeFi token security?

Accepted Answer

Developers abandoning a project and draining liquidity, leaving investors with worthless tokens

Answer

Rug pulls occur when malicious developers withdraw all liquidity pool funds after attracting investors, causing the token price to collapse to zero.

Question 2

Which type of DeFi attack exploits the ordering of transactions within a block for profit?

Accepted Answer

Maximal Extractable Value (MEV) exploitation

Answer

MEV refers to profit extracted by reordering, inserting, or censoring transactions within a block, often at the expense of regular users.

Question 3

A liquidity pool uses a constant product formula (x * y = k). What attack surface does this create for low-liquidity pools?

Accepted Answer

High price impact susceptibility making oracle manipulation cheaper and more effective

Answer

Low-liquidity constant-product pools can be significantly price-manipulated with relatively small capital, making them ideal oracle attack targets.

Question 4

What is a token vesting contract security concern that a CBSE professional should audit?

Accepted Answer

Improper access control allowing beneficiaries or admins to bypass vesting schedules and drain tokens early

Answer

Vesting contracts must enforce time-locks and access controls; bugs in these checks allow premature withdrawal that undermines tokenomics.

Question 5

What does 'approval phishing' target in the DeFi ecosystem?

Accepted Answer

Tricking users into signing unlimited ERC-20 token approvals that drain their wallets

Answer

Approval phishing tricks victims into authorizing malicious contracts to spend all their tokens via a standard ERC-20 approve() call.

(CBSE) Certified Blockchain Security Expert Practice Test