A surprisingly simple pool allows anyone to deposit ETH, and withdraw it at any point in time.It has 1000 ETH in balance already, and is offering free flash loans using the deposited ETH to promote their system.Starting with 1 ETH in balance, pass the challenge by taking all ETH from the pool. Challenge #4 – […]
Side Entrance | Damn Vulnerable DeFi #4 Walk-Through Read More »
EVM Puzzle 4 combines a number of opcodes that we have already been introduced to and one new one, XOR. The first two codes are CALLVALUE and CODESIZE.CALLVALUE is equal to the amount of Wei we use to make the call.CODESIZE is equal to the byte size of the code. The description of XOR tells
EVM Puzzles 4 Walk-Through Read More »
EVM puzzle number three holds just 6 op codes for us to decipher. Starting with 36 CALLDATASIZE, then 56 JUMP, and our 5B JUMPDEST is 3 slots under at the 04 index. Heading over to evm.code’s playground, let’s input our opcodes and do a test call with an arbitrary value to view how we step
EVM Puzzles 3 Walk-Through Read More »
Unlock the vault to win the level. It’s set to locked and password protected at deployment, this is done using the bool public locked; variable and the bytes32 private password; variable, the problem is that this data is stored on chain, allowing anyone to determine what is being stored. Private data shouldn’t be stored on-chain
Vault | OpenZeppelin’s Ethernaut Level 8 Walk-Through Read More »
Level 7 of Ethernaut is Force, a lesson in self destruction. We are given this contract that contains a cat: Since the contract has no payable fallback functions we can’t send ether to the contract in the traditional ways.But the hints let us know to use another contract to attack, enter selfdestruct() Self Destruct Contracts
Force | OpenZeppelin’s Ethernaut Level 7 Walk-Through Read More »
More and more lending pools are offering flash loans. In this case, a new pool has launched that is offering flash loans of DVT tokens for free.The pool holds 1 million DVT tokens. You have nothing.To pass this challenge, take all tokens out of the pool. If possible, in a single transaction. https://www.damnvulnerabledefi.xyz/challenges/truster/ Free flash
Truster | Damn Vulnerable DeFi #3 Walk-Through Read More »
We are given the following Solidity file that contains two contracts Delegate and Delegation. Get your new instance and open your console. According to the Solidity docs, delegatecall is similar to a call except it passes the original msg.sender and msg.value, rather than the contract making the call: There exists a special variant of a
Delegation | Ethernaut Level 6 Walk-Through Read More »
There’s a pool with 1000 ETH in balance, offering flash loans. It has a fixed fee of 1 ETH.A user has deployed a contract with 10 ETH in balance. It’s capable of interacting with the pool and receiving flash loans of ETH.Take all ETH out of the user’s contract. If possible, in a single transaction.
Naive receiver | Damn Vulnerable DeFi #2 Walk-Through Read More »
There’s a tokenized vault with a million DVT tokens deposited. It’s offering flash loans for free, until the grace period ends. To pass the challenge, make the vault stop offering flash loans. You start with 10 DVT tokens in balance. https://www.damnvulnerabledefi.xyz/challenges/unstoppable/ We are given two smart contracts ReceiverUnstoppable.sol and UnstoppableVault.sol and the unstoppable.challenge.js file to
Unstoppable | Damn Vulnerable DeFi #1 Walk-Through Read More »
As a continuation of my Web3 CTF walk-throughs I’m going to be starting on Damn Vulnerable DeFi, let this post guide us on installing and preparing our environment. Damn Vulnerable DeFi is the wargame to learn offensive security of DeFi smart contracts in Ethereum. Featuring flash loans, price oracles, governance, NFTs, DEXs, lending pools, smart
Damn Vulnerable DeFi Setup Read More »