A surprisingly simple pool allows anyone to deposit ETH, and withdraw it at any point in time.It has 1000 ETH in balance already, and is offering free flash loans using the deposited ETH to promote their system.Starting with 1 ETH in balance, pass the challenge by taking all ETH from the pool. Challenge #4 – […]
Side Entrance | Damn Vulnerable DeFi #4 Walk-Through Read More »
EVM Puzzle 4 combines a number of opcodes that we have already been introduced to and one new one, XOR. The first two codes are CALLVALUE and CODESIZE.CALLVALUE is equal to the amount of Wei we use to make the call.CODESIZE is equal to the byte size of the code. The description of XOR tells
EVM Puzzles 4 Walk-Through Read More »
EVM puzzle number three holds just 6 op codes for us to decipher. Starting with 36 CALLDATASIZE, then 56 JUMP, and our 5B JUMPDEST is 3 slots under at the 04 index. Heading over to evm.code’s playground, let’s input our opcodes and do a test call with an arbitrary value to view how we step
EVM Puzzles 3 Walk-Through Read More »
Unlock the vault to win the level. It’s set to locked and password protected at deployment, this is done using the bool public locked; variable and the bytes32 private password; variable, the problem is that this data is stored on chain, allowing anyone to determine what is being stored. Private data shouldn’t be stored on-chain
Vault | OpenZeppelin’s Ethernaut Level 8 Walk-Through Read More »
Level 7 of Ethernaut is Force, a lesson in self destruction. We are given this contract that contains a cat: Since the contract has no payable fallback functions we can’t send ether to the contract in the traditional ways.But the hints let us know to use another contract to attack, enter selfdestruct() Self Destruct Contracts
Force | OpenZeppelin’s Ethernaut Level 7 Walk-Through Read More »
More and more lending pools are offering flash loans. In this case, a new pool has launched that is offering flash loans of DVT tokens for free.The pool holds 1 million DVT tokens. You have nothing.To pass this challenge, take all tokens out of the pool. If possible, in a single transaction. https://www.damnvulnerabledefi.xyz/challenges/truster/ Free flash
Truster | Damn Vulnerable DeFi #3 Walk-Through Read More »