iotaaxel / damn-vulnerable-defi

ctf solutions

A set of challenges to learn offensive security of smart contracts in Ethereum.

Featuring flash loans, price oracles, governance, NFTs, lending pools, smart contract wallets, timelocks, and more!

Play

Visit damnvulnerabledefi.xyz

Disclaimer

All Solidity code, practices and patterns in this repository are DAMN VULNERABLE and for educational purposes only.

DO NOT USE IN PRODUCTION.

TODO

Challenge	Status	Write-up
Unstoppable	SUCCESS	write-up
Naive receiver	WIP	write-up
Truster	WIP	write-up
Side entrance	WIP	write-up
The rewarder	WIP	write-up
Selfie	WIP	write-up
Compromised	WIP	write-up
Puppet	WIP	write-up
Puppet v2	WIP	write-up
Free rider	WIP	write-up
Backdoor	WIP	write-up
Climber	WIP	write-up

Important Note:

• For the Safe Miners Challenge, the following warning was given (so I might hold off on the safe miners solution and write-up):

Watchout! This challenge is being heavily reworked for the upcoming v3 version of Damn Vulnerable DeFi. You'd better wait for the new version before solving it.