├── LICENSE └── README.md /LICENSE: -------------------------------------------------------------------------------- 1 | Creative Commons Legal Code 2 | 3 | CC0 1.0 Universal 4 | 5 | CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE 6 | LEGAL SERVICES. DISTRIBUTION OF THIS DOCUMENT DOES NOT CREATE AN 7 | ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS 8 | INFORMATION ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES 9 | REGARDING THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS 10 | PROVIDED HEREUNDER, AND DISCLAIMS LIABILITY FOR DAMAGES RESULTING FROM 11 | THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS PROVIDED 12 | HEREUNDER. 13 | 14 | Statement of Purpose 15 | 16 | The laws of most jurisdictions throughout the world automatically confer 17 | exclusive Copyright and Related Rights (defined below) upon the creator 18 | and subsequent owner(s) (each and all, an "owner") of an original work of 19 | authorship and/or a database (each, a "Work"). 20 | 21 | Certain owners wish to permanently relinquish those rights to a Work for 22 | the purpose of contributing to a commons of creative, cultural and 23 | scientific works ("Commons") that the public can reliably and without fear 24 | of later claims of infringement build upon, modify, incorporate in other 25 | works, reuse and redistribute as freely as possible in any form whatsoever 26 | and for any purposes, including without limitation commercial purposes. 27 | These owners may contribute to the Commons to promote the ideal of a free 28 | culture and the further production of creative, cultural and scientific 29 | works, or to gain reputation or greater distribution for their Work in 30 | part through the use and efforts of others. 31 | 32 | For these and/or other purposes and motivations, and without any 33 | expectation of additional consideration or compensation, the person 34 | associating CC0 with a Work (the "Affirmer"), to the extent that he or she 35 | is an owner of Copyright and Related Rights in the Work, voluntarily 36 | elects to apply CC0 to the Work and publicly distribute the Work under its 37 | terms, with knowledge of his or her Copyright and Related Rights in the 38 | Work and the meaning and intended legal effect of CC0 on those rights. 39 | 40 | 1. Copyright and Related Rights. A Work made available under CC0 may be 41 | protected by copyright and related or neighboring rights ("Copyright and 42 | Related Rights"). Copyright and Related Rights include, but are not 43 | limited to, the following: 44 | 45 | i. the right to reproduce, adapt, distribute, perform, display, 46 | communicate, and translate a Work; 47 | ii. moral rights retained by the original author(s) and/or performer(s); 48 | iii. publicity and privacy rights pertaining to a person's image or 49 | likeness depicted in a Work; 50 | iv. rights protecting against unfair competition in regards to a Work, 51 | subject to the limitations in paragraph 4(a), below; 52 | v. rights protecting the extraction, dissemination, use and reuse of data 53 | in a Work; 54 | vi. database rights (such as those arising under Directive 96/9/EC of the 55 | European Parliament and of the Council of 11 March 1996 on the legal 56 | protection of databases, and under any national implementation 57 | thereof, including any amended or successor version of such 58 | directive); and 59 | vii. other similar, equivalent or corresponding rights throughout the 60 | world based on applicable law or treaty, and any national 61 | implementations thereof. 62 | 63 | 2. Waiver. To the greatest extent permitted by, but not in contravention 64 | of, applicable law, Affirmer hereby overtly, fully, permanently, 65 | irrevocably and unconditionally waives, abandons, and surrenders all of 66 | Affirmer's Copyright and Related Rights and associated claims and causes 67 | of action, whether now known or unknown (including existing as well as 68 | future claims and causes of action), in the Work (i) in all territories 69 | worldwide, (ii) for the maximum duration provided by applicable law or 70 | treaty (including future time extensions), (iii) in any current or future 71 | medium and for any number of copies, and (iv) for any purpose whatsoever, 72 | including without limitation commercial, advertising or promotional 73 | purposes (the "Waiver"). Affirmer makes the Waiver for the benefit of each 74 | member of the public at large and to the detriment of Affirmer's heirs and 75 | successors, fully intending that such Waiver shall not be subject to 76 | revocation, rescission, cancellation, termination, or any other legal or 77 | equitable action to disrupt the quiet enjoyment of the Work by the public 78 | as contemplated by Affirmer's express Statement of Purpose. 79 | 80 | 3. Public License Fallback. Should any part of the Waiver for any reason 81 | be judged legally invalid or ineffective under applicable law, then the 82 | Waiver shall be preserved to the maximum extent permitted taking into 83 | account Affirmer's express Statement of Purpose. In addition, to the 84 | extent the Waiver is so judged Affirmer hereby grants to each affected 85 | person a royalty-free, non transferable, non sublicensable, non exclusive, 86 | irrevocable and unconditional license to exercise Affirmer's Copyright and 87 | Related Rights in the Work (i) in all territories worldwide, (ii) for the 88 | maximum duration provided by applicable law or treaty (including future 89 | time extensions), (iii) in any current or future medium and for any number 90 | of copies, and (iv) for any purpose whatsoever, including without 91 | limitation commercial, advertising or promotional purposes (the 92 | "License"). The License shall be deemed effective as of the date CC0 was 93 | applied by Affirmer to the Work. Should any part of the License for any 94 | reason be judged legally invalid or ineffective under applicable law, such 95 | partial invalidity or ineffectiveness shall not invalidate the remainder 96 | of the License, and in such case Affirmer hereby affirms that he or she 97 | will not (i) exercise any of his or her remaining Copyright and Related 98 | Rights in the Work or (ii) assert any associated claims and causes of 99 | action with respect to the Work, in either case contrary to Affirmer's 100 | express Statement of Purpose. 101 | 102 | 4. Limitations and Disclaimers. 103 | 104 | a. No trademark or patent rights held by Affirmer are waived, abandoned, 105 | surrendered, licensed or otherwise affected by this document. 106 | b. Affirmer offers the Work as-is and makes no representations or 107 | warranties of any kind concerning the Work, express, implied, 108 | statutory or otherwise, including without limitation warranties of 109 | title, merchantability, fitness for a particular purpose, non 110 | infringement, or the absence of latent or other defects, accuracy, or 111 | the present or absence of errors, whether or not discoverable, all to 112 | the greatest extent permissible under applicable law. 113 | c. Affirmer disclaims responsibility for clearing rights of other persons 114 | that may apply to the Work or any use thereof, including without 115 | limitation any person's Copyright and Related Rights in the Work. 116 | Further, Affirmer disclaims responsibility for obtaining any necessary 117 | consents, permissions or other rights required for any use of the 118 | Work. 119 | d. Affirmer understands and acknowledges that Creative Commons is not a 120 | party to this document and has no duty or obligation with respect to 121 | this CC0 or use of the Work. 122 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # Awesome Blocksec CTFs 2 | A curated list of blockchain security Capture the Flag (CTF) competitions 3 | 4 | ## Online and self-hosted CTFs 5 | 6 | * [Damn Vulnerable DeFi](https://www.damnvulnerabledefi.xyz/) 7 | * [Ethernaut](https://ethernaut.openzeppelin.com/) 8 | * [Capture the Ether](https://capturetheether.com/) 9 | * [EtherHack](https://etherhack.positive.com/) 10 | * [Security Innovation Blockchain CTF](https://blockchain-ctf.securityinnovation.com/) 11 | * [HACON2020 CTF by RazzorSec](https://github.com/razzorsec/Blockchain-HACON2020) 12 | * [Damn Vulnerable Crypto Wallet](https://gitlab.com/badbounty/dvcw) 13 | * [NCCGroup GOAT Casino](https://github.com/nccgroup/GOATCasino) 14 | * Authio Solidity CTF: 15 | * [Part 1 - Function Types](https://ropsten.etherscan.io/address/0x727c1c8d4b190d208f3701f106f7301cb1a32f27#code) 16 | * [Part 2 - Safe Execution](https://ropsten.etherscan.io/address/0x023916f968af3fbb21ac10abbe18448c79d609c2#code) 17 | * [Part 3 - HoneyPot](https://ropsten.etherscan.io/address/0xdc65b61be773f8be72ded22ac008ad5add045e3c#code) 18 | * [Part 4 - Read the Fine Print](https://ropsten.etherscan.io/address/0x1b359afb0bd86a6c435d178b1fbf8a6fda3ead7d#code) 19 | * [Part 5 - Mirror Madness](https://etherscan.io/address/0x7cd03C9f1D2dc95358B1992e9afc857aeaab45D5) 20 | * [Cryptohunt by p4d](https://github.com/PumpkingWok/CTFGym/tree/master/contracts/ctf-mainnet) 21 | * [Impossible by u/eththrowaway4](https://ropsten.etherscan.io/address/0x0daabce0a1261b582e0d949ebca9dff4c22c88ef#code) 22 | 23 | ## CTF Announcements and Writeups 24 | 25 | * [Paradigm CTF](https://ctf.paradigm.xyz/) - 2021 26 | 27 | * [Damn Vulnerable DeFi](https://www.damnvulnerabledefi.xyz/) - 2020 28 | * [Damn Vulnerable DeFi Solutions by cmichel](https://cmichel.io/damn-vulnerable-de-fi-solutions/) 29 | * [Write-ups and lessons learned from Damn Vulnerable #DeFi by Damian Rusinek](https://drdr-zz.medium.com/write-ups-and-lessons-learned-from-damn-vulnerable-defi-caa95d2678ec) 30 | * [Damn Vulnerable DeFi — Setup and Challenge #1 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-setup-and-challenge-1-walkthrough-1ea16ea09709) 31 | * [Damn Vulnerable DeFi — Challenge #2 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-challenge-2-walkthrough-c2a7eac3374d) 32 | * [Damn Vulnerable DeFi — Challenge #3 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-challenge-3-walkthrough-fe8e9c8e36f3) 33 | * [Damn Vulnerable DeFi — Challenge #4 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-challenge-4-walkthrough-881f7f12f118) 34 | * [Damn Vulnerable DeFi — Challenge #5 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-challenge-5-walkthrough-2dd516735ad6) 35 | * [Damn Vulnerable DeFi — Challenge #6 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-challenge-6-walkthrough-63c7584e5240) 36 | * [Damn Vulnerable DeFi — Challenge #7 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-challenge-7-walkthrough-ee9fac3fdcd4) 37 | 38 | * [Ethernaut](https://ethernaut.openzeppelin.com/) 39 | * [Ethernaut Solutions by cmichel](https://cmichel.io/ethernaut-solutions/) - Challenges 0-21 40 | * [Ethernaut Writeups by Macmod](https://github.com/Macmod/ethernaut-writeups) - Challenges 0-9 41 | * [Ethernaut Solutions by tsauvajon](https://github.com/tsauvajon/ethernaut) - Challenges 1-11 42 | * [Ethernaut Solutions by tinchoabbate](https://www.notonlyowner.com/) 43 | * [The Ethernaut CTF Writeup by Arseny Reutov](https://blog.positive.com/the-ethernaut-ctf-writeup-dc3021824abc) - Challenges 0-6 44 | * [Ethernaut Lvl 1 Walkthrough: how to abuse the Fallback function by Nicole Zhu](https://hackernoon.com/ethernaut-lvl-1-walkthrough-how-to-abuse-the-fallback-function-118057b68b56) 45 | 46 | * [Capture the Ether](https://capturetheether.com/) 47 | * [Capture the Ether Solutions by cmichel](https://cmichel.io/capture-the-ether-solutions/) 48 | 49 | * [0xPOLAND](https://0xpoland.dev/) - 2020 50 | * [0xPOLAND — Adventure Awaits by iphelix](https://iphelix.medium.com/0xpoland-adventure-awaits-338ffc834d80) 51 | 52 | * [AnChain CTF](https://www.anchain.ai/defi-detectives) - 2020 53 | * [DeFi Detectives: Chef Nomi Investigation Notes by iphelix](https://iphelix.medium.com/defi-detectives-chef-nomi-investigation-notes-9468792b5f29) 54 | * [DeFi Detectives: Discovering the Secrets of the DeFi Ecosystem](https://anchainai.medium.com/defi-detectives-discovering-the-secrets-of-the-defi-ecosystem-f227e5c8038a) 55 | * [Congratulations Bitcoin Bounty Hunters! The World’s First Blockchain Investigation Contest.](https://anchainai.medium.com/congratulations-bitcoin-bounty-hunters-the-worlds-first-blockchain-investigation-contest-a271d84fcc05) 56 | 57 | * [Donjon CTF](https://donjon-ctf.io/) - 2020 58 | * [CTF 2020: Capture the Fortress](https://donjon.ledger.com/Capture-the-Fortress/) 59 | * [Ledger Donjon CTF: Rationale and Winners!](https://www.ledger.com/blog/ledger-donjon-ctf-2020-challenges-and-winners) 60 | 61 | * [Chain Heist](https://chainheist.com) - 2019 62 | * [Chain Heist and blockchain security at DEF CON 2019](https://www.synopsys.com/blogs/software-security/chain-heist-blockchain-security/) 63 | * [Chain Heist CTF Writeup by iphelix](https://iphelix.medium.com/chain-heist-writeup-4f008cd6d346) 64 | 65 | * [Capture the Coin](https://capturethecoin.org) - 2019 66 | * [“Capture the Coin” at Defcon and you could win big](https://blog.coinbase.com/capture-the-coin-at-defcon-and-you-could-win-big-2de5a616929a) 67 | * [How the Coinbase Security team deployed CTFd to Power our First Capture the Flag contest at Defcon 27](https://blog.coinbase.com/how-the-coinbase-security-team-deployed-ctfd-to-power-our-first-capture-the-flag-contest-at-defcon-eeb8da3bf2b0) 68 | * [Congratulations Capture the Coin participants!](https://blog.coinbase.com/congratulations-capture-the-coin-participants-2028b2e5d14c) 69 | * [Capture the Coin — Trivia Solutions](https://blog.coinbase.com/capture-the-coin-trivia-solutions-98fd99aadb75) 70 | * [Capture the Coin — Blockchain Category Solutions](https://blog.coinbase.com/capture-the-coin-blockchain-category-solutions-9aef880d7e00) 71 | * [Capture the Coin — Cryptography Category Solutions](https://blog.coinbase.com/capture-the-coin-cryptography-category-solutions-fe94d82165c5) 72 | 73 | * [ConsenSys Dilligence Ethereum Hacking Challenge](https://medium.com/consensys-diligence/consensys-diligence-ether-giveaway-1-4985627b7726) - 2018 74 | * [Consensys CTF Writeup by samczsun](https://samczsun.com/consensys-ctf-writeup/) 75 | 76 | * [EtherHack](https://etherhack.positive.com/) - 2018 77 | * [EtherHack Contest Writeup](https://blog.positive.com/phdays-8-etherhack-contest-writeup-794523f01248) 78 | 79 | * Authio Solidity CTF - 2018 80 | * [Solidity CTF - Part 1: "Function Types](https://www.reddit.com/r/ethdev/comments/8td9xn/challenge_empty_the_contract_of_funds/) 81 | * [Solidity CTF — Part 2: “Safe Execution”](https://medium.com/authio/solidity-ctf-part-2-safe-execution-ad6ded20e042)by Alexander Wade 82 | * [Solidity CTF — Part 3: “HoneyPot”](https://medium.com/authio/solidity-ctf-part-3-honeypot-8a8b6fecc6a2) by Alexander Wade 83 | * [Solidity CTF — Part 4: Read the Fine Print](https://medium.com/authio/solidity-ctf-part-4-read-the-fine-print-5ad259a5f5bb) by Alex Towle 84 | * [Solidity CTF - Part 5: Mirror Madness](https://medium.com/authio/ctf-duplication-dd32cd4ef690) by Paul Vienhage 85 | --------------------------------------------------------------------------------