A set of challenges to learn offensive security of smart contracts in Ethereum.
Featuring flash loans, price oracles, governance, NFTs, lending pools, smart contract wallets, timelocks, and more!
Visit damnvulnerabledefi.xyz
All Solidity code, practices and patterns in this repository are DAMN VULNERABLE and for educational purposes only.
DO NOT USE IN PRODUCTION.
Challenge | Status | Write-up |
---|---|---|
Unstoppable | SUCCESS | write-up |
Naive receiver | WIP | write-up |
Truster | WIP | write-up |
Side entrance | WIP | write-up |
The rewarder | WIP | write-up |
Selfie | WIP | write-up |
Compromised | WIP | write-up |
Puppet | WIP | write-up |
Puppet v2 | WIP | write-up |
Free rider | WIP | write-up |
Backdoor | WIP | write-up |
Climber | WIP | write-up |
- For the Safe Miners Challenge, the following warning was given (so I might hold off on the safe miners solution and write-up):
Watchout! This challenge is being heavily reworked for the upcoming v3 version of Damn Vulnerable DeFi. You'd better wait for the new version before solving it.