├── LICENSE └── README.md /LICENSE: -------------------------------------------------------------------------------- 1 | Creative Commons Legal Code 2 | 3 | CC0 1.0 Universal 4 | 5 | CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE 6 | LEGAL SERVICES. DISTRIBUTION OF THIS DOCUMENT DOES NOT CREATE AN 7 | ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS 8 | INFORMATION ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES 9 | REGARDING THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS 10 | PROVIDED HEREUNDER, AND DISCLAIMS LIABILITY FOR DAMAGES RESULTING FROM 11 | THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS PROVIDED 12 | HEREUNDER. 13 | 14 | Statement of Purpose 15 | 16 | The laws of most jurisdictions throughout the world automatically confer 17 | exclusive Copyright and Related Rights (defined below) upon the creator 18 | and subsequent owner(s) (each and all, an "owner") of an original work of 19 | authorship and/or a database (each, a "Work"). 20 | 21 | Certain owners wish to permanently relinquish those rights to a Work for 22 | the purpose of contributing to a commons of creative, cultural and 23 | scientific works ("Commons") that the public can reliably and without fear 24 | of later claims of infringement build upon, modify, incorporate in other 25 | works, reuse and redistribute as freely as possible in any form whatsoever 26 | and for any purposes, including without limitation commercial purposes. 27 | These owners may contribute to the Commons to promote the ideal of a free 28 | culture and the further production of creative, cultural and scientific 29 | works, or to gain reputation or greater distribution for their Work in 30 | part through the use and efforts of others. 31 | 32 | For these and/or other purposes and motivations, and without any 33 | expectation of additional consideration or compensation, the person 34 | associating CC0 with a Work (the "Affirmer"), to the extent that he or she 35 | is an owner of Copyright and Related Rights in the Work, voluntarily 36 | elects to apply CC0 to the Work and publicly distribute the Work under its 37 | terms, with knowledge of his or her Copyright and Related Rights in the 38 | Work and the meaning and intended legal effect of CC0 on those rights. 39 | 40 | 1. Copyright and Related Rights. A Work made available under CC0 may be 41 | protected by copyright and related or neighboring rights ("Copyright and 42 | Related Rights"). Copyright and Related Rights include, but are not 43 | limited to, the following: 44 | 45 | i. the right to reproduce, adapt, distribute, perform, display, 46 | communicate, and translate a Work; 47 | ii. moral rights retained by the original author(s) and/or performer(s); 48 | iii. publicity and privacy rights pertaining to a person's image or 49 | likeness depicted in a Work; 50 | iv. rights protecting against unfair competition in regards to a Work, 51 | subject to the limitations in paragraph 4(a), below; 52 | v. rights protecting the extraction, dissemination, use and reuse of data 53 | in a Work; 54 | vi. database rights (such as those arising under Directive 96/9/EC of the 55 | European Parliament and of the Council of 11 March 1996 on the legal 56 | protection of databases, and under any national implementation 57 | thereof, including any amended or successor version of such 58 | directive); and 59 | vii. other similar, equivalent or corresponding rights throughout the 60 | world based on applicable law or treaty, and any national 61 | implementations thereof. 62 | 63 | 2. Waiver. To the greatest extent permitted by, but not in contravention 64 | of, applicable law, Affirmer hereby overtly, fully, permanently, 65 | irrevocably and unconditionally waives, abandons, and surrenders all of 66 | Affirmer's Copyright and Related Rights and associated claims and causes 67 | of action, whether now known or unknown (including existing as well as 68 | future claims and causes of action), in the Work (i) in all territories 69 | worldwide, (ii) for the maximum duration provided by applicable law or 70 | treaty (including future time extensions), (iii) in any current or future 71 | medium and for any number of copies, and (iv) for any purpose whatsoever, 72 | including without limitation commercial, advertising or promotional 73 | purposes (the "Waiver"). Affirmer makes the Waiver for the benefit of each 74 | member of the public at large and to the detriment of Affirmer's heirs and 75 | successors, fully intending that such Waiver shall not be subject to 76 | revocation, rescission, cancellation, termination, or any other legal or 77 | equitable action to disrupt the quiet enjoyment of the Work by the public 78 | as contemplated by Affirmer's express Statement of Purpose. 79 | 80 | 3. Public License Fallback. Should any part of the Waiver for any reason 81 | be judged legally invalid or ineffective under applicable law, then the 82 | Waiver shall be preserved to the maximum extent permitted taking into 83 | account Affirmer's express Statement of Purpose. In addition, to the 84 | extent the Waiver is so judged Affirmer hereby grants to each affected 85 | person a royalty-free, non transferable, non sublicensable, non exclusive, 86 | irrevocable and unconditional license to exercise Affirmer's Copyright and 87 | Related Rights in the Work (i) in all territories worldwide, (ii) for the 88 | maximum duration provided by applicable law or treaty (including future 89 | time extensions), (iii) in any current or future medium and for any number 90 | of copies, and (iv) for any purpose whatsoever, including without 91 | limitation commercial, advertising or promotional purposes (the 92 | "License"). The License shall be deemed effective as of the date CC0 was 93 | applied by Affirmer to the Work. Should any part of the License for any 94 | reason be judged legally invalid or ineffective under applicable law, such 95 | partial invalidity or ineffectiveness shall not invalidate the remainder 96 | of the License, and in such case Affirmer hereby affirms that he or she 97 | will not (i) exercise any of his or her remaining Copyright and Related 98 | Rights in the Work or (ii) assert any associated claims and causes of 99 | action with respect to the Work, in either case contrary to Affirmer's 100 | express Statement of Purpose. 101 | 102 | 4. Limitations and Disclaimers. 103 | 104 | a. No trademark or patent rights held by Affirmer are waived, abandoned, 105 | surrendered, licensed or otherwise affected by this document. 106 | b. Affirmer offers the Work as-is and makes no representations or 107 | warranties of any kind concerning the Work, express, implied, 108 | statutory or otherwise, including without limitation warranties of 109 | title, merchantability, fitness for a particular purpose, non 110 | infringement, or the absence of latent or other defects, accuracy, or 111 | the present or absence of errors, whether or not discoverable, all to 112 | the greatest extent permissible under applicable law. 113 | c. Affirmer disclaims responsibility for clearing rights of other persons 114 | that may apply to the Work or any use thereof, including without 115 | limitation any person's Copyright and Related Rights in the Work. 116 | Further, Affirmer disclaims responsibility for obtaining any necessary 117 | consents, permissions or other rights required for any use of the 118 | Work. 119 | d. Affirmer understands and acknowledges that Creative Commons is not a 120 | party to this document and has no duty or obligation with respect to 121 | this CC0 or use of the Work. 122 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # Blocksec CTFs 2 | A curated list of blockchain security Wargames, Challenges, and Capture the Flag (CTF) competitions and solution writeups. 3 | 4 | ## Wargames and Writeups 5 | 6 | * [Ethernaut](https://ethernaut.openzeppelin.com/) 7 | * [Ethernaut Solutions by cmichel](https://cmichel.io/ethernaut-solutions/) - Challenges 0-21 8 | * [Ethernaut Writeups by Macmod](https://github.com/Macmod/ethernaut-writeups) - Challenges 0-9 9 | * [Ethernaut Solutions by tsauvajon](https://github.com/tsauvajon/ethernaut) - Challenges 1-11 10 | * [Ethernaut Solutions by tinchoabbate](https://www.notonlyowner.com/) 11 | * [The Ethernaut CTF Writeup by Arseny Reutov](https://blog.positive.com/the-ethernaut-ctf-writeup-dc3021824abc) - Challenges 0-6 12 | * [Ethernaut Lvl 0 Walkthrough: ABIs, Web3, and how to abuse them](https://medium.com/hackernoon/ethernaut-lvl-0-walkthrough-abis-web3-and-how-to-abuse-them-d92a8842d71b) by Nicole Zhu 13 | * [Ethernaut Lvl 1 Walkthrough: how to abuse the Fallback function](https://medium.com/hackernoon/ethernaut-lvl-1-walkthrough-how-to-abuse-the-fallback-function-118057b68b56) by Nicole Zhu 14 | * [Ethernaut Lvl 2 Fallout Walkthrough: how simple developer errors become big mistakes](https://medium.com/@nicolezhu/ethernaut-lvl-2-walkthrough-how-simple-developer-errors-become-big-mistakes-b705ff00a62f) by Nicole Zhu 15 | * [Ethernaut Lvl 3 Coin Flip Walkthrough: how to abuse psuedo randomness in smart contracts](https://medium.com/@nicolezhu/ethernaut-lvl-3-walkthrough-how-to-abuse-psuedo-randomness-in-smart-contracts-4cc06bb82570) by Nicole Zhu 16 | * [Ethernaut Lvl 4 Telephone Walkthrough: how to abuse tx.origin & msg.sender](https://medium.com/@nicolezhu/ethernaut-lvl-4-walkthrough-how-to-abuse-tx-origin-msg-sender-ef37d6751c8) by Nicole Zhu 17 | * [Ethernaut Lvl 5 Token Walkthrough: How to abuse arithmetic underflows and overflows](https://medium.com/coinmonks/ethernaut-lvl-5-walkthrough-how-to-abuse-arithmetic-underflows-and-overflows-2c614fa86b74) by Nicole Zhu 18 | * [Ethernaut Lvl 6 Delegation Walkthrough: How to abuse the delicate delegatecall](https://medium.com/coinmonks/ethernaut-lvl-6-walkthrough-how-to-abuse-the-delicate-delegatecall-466b26c429e4) by Nicole Zhu 19 | * [Ethernaut Lvl 7 Force Walkthrough — How to selfdestruct and create an Ether blackhole](https://medium.com/coinmonks/ethernaut-lvl-7-walkthrough-how-to-selfdestruct-and-create-an-ether-blackhole-eb5bb72d2c57) by Nicole Zhu 20 | * [Ethernaut Lvl 8 Vault Walkthrough — How to read “private” variables in contract storage (with Truffle)](https://medium.com/coinmonks/how-to-read-private-variables-in-contract-storage-with-truffle-ethernaut-lvl-8-walkthrough-b2382741da9f) by Nicole Zhu 21 | * [Ethernaut Lvl 9 King Walkthrough: How bad contracts can abuse withdrawals](https://medium.com/coinmonks/ethernaut-lvl-9-king-walkthrough-how-bad-contracts-can-abuse-withdrawals-db12754f359b) by Nicole Zhu 22 | * [Ethernaut Lvl 10 Re-entrancy Walkthrough: How to abuse execution ordering and reproduce the DAO hack](https://medium.com/coinmonks/ethernaut-lvl-10-re-entrancy-walkthrough-how-to-abuse-execution-ordering-and-reproduce-the-dao-7ec88b912c14) by Nicole Zhu 23 | * [Ethernaut Lvl 11 Elevator Walkthrough: How to abuse Solidity interfaces and function state modifiers](https://medium.com/coinmonks/ethernaut-lvl-11-elevator-walkthrough-how-to-abuse-solidity-interfaces-and-function-state-41005470121d) by Nicole Zhu 24 | * [Ethernaut Lvl 12 Privacy Walkthrough: How Ethereum optimizes storage to save space and be less gassy](https://medium.com/coinmonks/ethernaut-lvl-12-privacy-walkthrough-how-ethereum-optimizes-storage-to-save-space-and-be-less-c9b01ec6adb6) by Nicole Zhu 25 | * [Ethernaut Lvl 13 Gatekeeper 1 Walkthrough: How to calculate smart contract gas consumption (and byte masking)](https://medium.com/coinmonks/ethernaut-lvl-13-gatekeeper-1-walkthrough-how-to-calculate-smart-contract-gas-consumption-and-eb4b042d3009) by Nicole Zhu 26 | * [Ethernaut Lvl 14 Gatekeeper 2 Walkthrough: How contracts initialize (and how to do bitwise operations)](https://medium.com/coinmonks/ethernaut-lvl-14-gatekeeper-2-walkthrough-how-contracts-initialize-and-how-to-do-bitwise-ddac8ad4f0fd) by Nicole Zhu 27 | * [Ethernaut Lvl 15 Naught Coin Walkthrough: How to abuse ERC20 tokens and bad ICOs](https://medium.com/coinmonks/ethernaut-lvl-15-naught-coin-walkthrough-how-to-abuse-erc20-tokens-and-bad-icos-6668b856a176) by Nicole Zhu 28 | * [Ethernaut Lvl 16 Preservation Walkthrough: How to inject malicious contracts with delegatecall](https://medium.com/coinmonks/ethernaut-lvl-16-preservation-walkthrough-how-to-inject-malicious-contracts-with-delegatecall-81e071f98a12) by Nicole Zhu 29 | * [Ethernaut Lvl 17 Locked Walkthrough: How to properly use (and abuse) structs in Solidity](https://medium.com/coinmonks/ethernaut-lvl-17-locked-walkthrough-how-to-properly-use-structs-in-solidity-f9900c8843e2) by Nicole Zhu 30 | * [Ethernaut Lvl 18 Recovery Walkthrough: How to retrieve lost contract addresses (in 2 ways)](https://medium.com/coinmonks/ethernaut-lvl-18-recovery-walkthrough-how-to-retrieve-lost-contract-addresses-in-2-ways-aba54ab167d3) by Nicole Zhu 31 | * [Ethernaut Lvl 19 MagicNumber Walkthrough: How to deploy contracts using raw assembly opcodes](https://medium.com/coinmonks/ethernaut-lvl-19-magicnumber-walkthrough-how-to-deploy-contracts-using-raw-assembly-opcodes-c50edb0f71a2) by Nicole Zhu 32 | * [Ethernaut Challenges solutions by Asamartino](https://github.com/Asamartino/EthernautChallenges) - Challenges (0-21) 33 | * [Ethernaut Challenges solutions by Simon ](https://github.com/STYJ/Ethernaut-Solutions) - Challenges (0-21) 34 | * [Ethernaut: Lvl 22 Dex - Writeups](https://medium.com/@this_post/ethernaut-22-dex-writeups-55d4bfa8a7fa) by thispost 35 | * [Ethernaut: Lvl 23 Dex Two - Writeups](https://dev.to/nvn/ethernaut-hacks-level-23-dex-two-4424) by Naveen 36 | * [Ethernaut: Lvl 24 Puzzle Wallet - Writeups](https://medium.com/@appsbylamby/ethernaut-24-puzzle-wallet-walkthrough-mastering-the-proxy-pattern-cc830dc364ce) by Lamby 37 | * [Ethernaut: Lvl 25 Motorbike - Writeups](https://medium.com/@appsbylamby/ethernaut-25-motorbikewalkthrough-3e1feeee6a4c) by Lamby 38 | * [Ethernaut: Lvl 26 DoubleEntryPoint - Writeups](https://www.youtube.com/watch?v=aGnC_917YOY) by D-Squared 39 | * [Ethernaut CTF Level 0 by D-Squared](https://www.youtube.com/watch?v=MaGAVBRwvbg) 40 | * [Ethernaut CTF Level 1 by D-Squared](https://www.youtube.com/watch?v=i-8cCDajPDQ) 41 | * [Ethernaut CTF Level 2 by D-Squared](https://www.youtube.com/watch?v=VGbxxdhOWvU) 42 | * [Ethernaut CTF Level 3 by D-Squared](https://www.youtube.com/watch?v=_ROuN1y6ldA) 43 | * [Ethernaut CTF Level 4 by D-Squared](https://www.youtube.com/watch?v=I12eO0nKOew) 44 | * [Ethernaut CTF Level 5 by D-Squared](https://www.youtube.com/watch?v=_ylKN2R_o-Y) 45 | * [Ethernaut CTF Level 6 by D-Squared](https://www.youtube.com/watch?v=_guLtDn_0_Y) 46 | * [Ethernaut Brownie Solutions](https://github.com/ptisserand/ethernaut-brownie) by ptisserand 47 | * [Ethernaut Truffle Solutions](https://github.com/tinchoabbate/ethernaut-ctf) by tincho 48 | * [Ethernaut Hardhat Solutions](https://github.com/MrToph/ethernaut) by MrToph 49 | 50 | * [Capture the Ether](https://capturetheether.com/) 51 | * [Capture the Ether Solutions by cmichel](https://cmichel.io/capture-the-ether-solutions/) 52 | * [Capture the Ether Solution](https://www.rphad.com/en/blog/2021/12/30/) by RD 53 | 54 | * [EtherHack](https://etherhack.positive.com/) 55 | * [EtherHack Contest Writeup](https://blog.positive.com/phdays-8-etherhack-contest-writeup-794523f01248) 56 | 57 | * [Security Innovation Blockchain CTF](https://blockchain-ctf.securityinnovation.com/) 58 | * [Security Innovation Blockchain CTF Solutions](https://github.com/narendrakpatel/blockchain-ctf-solutions) by Narendra Patel 59 | 60 | * [Cipher Shastra](https://ciphershastra.com/) 61 | * [Sherlock Writeup](https://razzor-writes.medium.com/sherlock-writeup-1fb5521ecd3a) by Razzor 62 | 63 | * [DeFi Hack](https://defihack.xyz/) 64 | * [DeFi Hack solutions: DiscoLP](https://raz0r.name/writeups/defi-hack-solutions-discolp/) 65 | * [DeFi Hack solutions: May The Force Be With You](https://raz0r.name/writeups/defi-hack-solutions-may-the-force-be-with-you/) 66 | 67 | * [Gacha Lab](https://gachalab.inspex.co/) 68 | * [How Hackers Can Become “Lucky” in NFT Minting](https://inspexco.medium.com/how-hackers-can-become-lucky-in-nft-minting-822f48d4b917) 69 | 70 | ## Challenges and Writeups 71 | * [EthernautDAO Challenges](https://twitter.com/EthernautDAO) 72 | * [Safe space, a place to be vulnerable](https://mirror.xyz/ethernautdao.eth/-rj5iTdt_GTRNS7aIzJBwqp95UGemxIMzNN-m96Io8Y) 73 | * [Car Market Solution](https://stermi.medium.com/ethernautdao-ctf-wallet-solution-1793f990c2d5) by StErMi 74 | * [Vending Machine Solution](https://stermi.medium.com/ethernautdao-ctf-vending-machine-solution-b30a74ba4a0f) by StErMi 75 | * [Wallet Solution](https://stermi.medium.com/ethernautdao-ctf-wallet-solution-7f28bc05c564) by StErMi 76 | 77 | * [Secureum-a-maze-x-challenges](https://github.com/eugenioclrc/secureum-a-maze-x-challenges) 78 | 79 | * [Sol Challenges and Solutions](https://github.com/massun-onibakuchi/sol-challenge#readme) 80 | 81 | * [Hats Finance Challenge](https://github.com/hats-finance/games) 82 | * [Solution](https://hatsfinance.medium.com/capture-the-flag-postmortem-bbc1b5afdf2c) 83 | * [Solution](https://merkleplant.xyz/posts/solution-to-hatsfinance-ctf-1) 84 | 85 | * [Hackxyk Stablecoin Challenge](https://github.com/hacxyk/hackxyk-lab) 86 | * [Solution](https://gist.github.com/abhishekvispute/b0101938489a8b8dc292e3070c27156e) by Abhishek Vispute 87 | * [Solution](https://twitter.com/ArbazKiraak/status/1526554729924509697?s=20&t=TGlLp77yDZhUF-BG5OGlnA) by Arbaz Hussain 88 | 89 | * [Immunefi Community Challenges](https://github.com/immunefi-team/community-challenges) by Immunefi 90 | 91 | * [EVM puzzles](https://github.com/fvictorio/evm-puzzles) by fvictorio 92 | * [Learning Ethereum Virtual Machine Opcodes With EVM Puzzles](https://ventral.digital/posts/2022/2/24/learning-ethereum-virtual-machine-opcodes-with-evm-puzzles) by patrickd 93 | * [EVM Puzzles – Second Wind](https://ventral.digital/posts/2022/3/12/evm-puzzles-second-wind) by patrickd 94 | * [Let’s play EVM Puzzles — learning Ethereum EVM while playing!](https://stermi.medium.com/lets-play-evm-puzzles-learning-ethereum-evm-while-playing-43a8354a02b3) 95 | 96 | * [More EVM puzzles](https://github.com/daltyboy11/more-evm-puzzles#readme) 97 | * [Solutions - Part 1](https://ventral.digital/posts/2022/5/24/more-evm-puzzles-part-1) by patrickd 98 | * [Solutions - Part 2](https://ventral.digital/posts/2022/5/26/more-evm-puzzles-part-2) by patrickd 99 | 100 | * [Solana Security Workshop](https://workshop.neodyme.io/index.html) by Neodyme 101 | * [Solution](https://github.com/MrToph/neodyme-breakpoint-workshop) by Christoph Michel 102 | 103 | * [Interview Contracts](https://github.com/HalbornSecurity/CTFs) by Halborn 104 | 105 | * [Pinball Challenge](https://rinkeby.etherscan.io/address/0xffb9205c84d0b209c215212a3cdfc50bf1cfb0e0#code) by samczsun 106 | * [Solution](https://twitter.com/karmacoma_eth/status/1451625194380939270) by KarmaComa 107 | * [Solution](https://twitter.com/adietrichs/status/1452040913140822020?s=20) by adietrichs 108 | * [Solution](https://medium.com/@kanewallmann_71759/an-untrustworthy-pinball-machine-d9dcd07882c) by Kane Wallmann 109 | 110 | * [Damn Vulnerable DeFi](https://www.damnvulnerabledefi.xyz/) 111 | * [Damn Vulnerable DeFi Solutions by cmichel](https://cmichel.io/damn-vulnerable-de-fi-solutions/) 112 | * [Write-ups and lessons learned from Damn Vulnerable #DeFi by Damian Rusinek](https://drdr-zz.medium.com/write-ups-and-lessons-learned-from-damn-vulnerable-defi-caa95d2678ec) 113 | * [Damn Vulnerable DeFi — Setup and Challenge #1 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-setup-and-challenge-1-walkthrough-1ea16ea09709) 114 | * [Damn Vulnerable DeFi — Challenge #2 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-challenge-2-walkthrough-c2a7eac3374d) 115 | * [Damn Vulnerable DeFi — Challenge #3 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-challenge-3-walkthrough-fe8e9c8e36f3) 116 | * [Damn Vulnerable DeFi — Challenge #4 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-challenge-4-walkthrough-881f7f12f118) 117 | * [Damn Vulnerable DeFi — Challenge #5 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-challenge-5-walkthrough-2dd516735ad6) 118 | * [Damn Vulnerable DeFi — Challenge #6 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-challenge-6-walkthrough-63c7584e5240) 119 | * [Damn Vulnerable DeFi — Challenge #7 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-challenge-7-walkthrough-ee9fac3fdcd4) 120 | * [Damn Vulnerable DeFi — Challenge #8 Walkthrough by iphelix](https://iphelix.medium.com/damn-vulnerable-defi-challenge-8-walkthrough-4e0d752d21ab) 121 | * [Damn Vulnerable DeFi Video Solutions by Smart Contract Programmer](https://www.youtube.com/playlist?list=PLO5VPQH6OWdXKPThrch6U0imGdD3pHLXi) 122 | * [Damn Vulnerable DeFi v2 - part #1: Setup and Challenges 1 to 4](https://ventral.digital/posts/2021/11/13/damn-vulnerable-defi-v2-part-1-setup-and-challenges-1-to-4) by patrickd 123 | * [Damn Vulnerable DeFi V2 - #5 The Rewarder](https://ventral.digital/posts/2021/12/1/damn-vulnerable-defi-v2-5-the-rewarder) by patrickd 124 | * [Damn Vulnerable DeFi V2 - #6 Selfie](https://ventral.digital/posts/2022/2/21/damn-vulnerable-defi-v2-6-selfie) by patrickd 125 | * [Damn Vulnerable DeFi V2 - #7 Compromised](https://ventral.digital/posts/2022/2/22/damn-vulnerable-defi-v2-7-compromised) by patrickd 126 | * [Damn Vulnerable DeFi V2 - #8 Puppet](https://ventral.digital/posts/2022/2/23/damn-vulnerable-defi-v2-8-puppet) by patrickd 127 | * [Damn Vulnerable DeFi V2 - #9 Puppet V2](https://ventral.digital/posts/2022/2/28/damn-vulnerable-defi-v2-9-puppet-v2) by patrickd 128 | * [Damn Vulnerable DeFi V2 - #10 Free Rider](https://ventral.digital/posts/2022/3/2/damn-vulnerable-defi-v2-10-free-rider) by patrickd 129 | * [Damn Vulnerable DeFi V2 - #11 Backdoor](https://ventral.digital/posts/2022/6/28/damn-vulnerable-defi-v2-11-backdoor) by patrickd 130 | * [Damn Vulnerable DeFi V2 - #12 Climber](https://ventral.digital/posts/2022/6/29/damn-vulnerable-defi-v2-12-climber) by patrickd 131 | * [Damn Vulnerable DeFi V2 - #13 Junior Miners](https://ventral.digital/posts/2022/7/2/damn-vulnerable-defi-v2-13-junior-miners) by patrickd 132 | 133 | * [NCCGroup GOAT Casino](https://github.com/nccgroup/GOATCasino) 134 | 135 | * [Damn Vulnerable Crypto Wallet](https://gitlab.com/badbounty/dvcw) 136 | 137 | * [Cryptohunt by p4d](https://github.com/PumpkingWok/CTFGym/tree/master/contracts/ctf-mainnet) 138 | 139 | * [Impossible by u/eththrowaway4](https://ropsten.etherscan.io/address/0x0daabce0a1261b582e0d949ebca9dff4c22c88ef#code) 140 | 141 | * Break My Contract, Steal My Money Challenges 142 | * [Break My Contract, Steal My Money - A Solidity Riddle](https://www.reddit.com/r/CryptoCurrency/comments/o6fshx/break_my_contract_steal_my_money_a_solidity_riddle/) 143 | * [Break My Contract (Part 1) - Buffer Overflow Solution](https://safecrypto.medium.com/break-my-contract-part-1-buffer-overflow-fbc2f63401ce) 144 | * [Break My Contract, Steal My Money - A Solidity Riddle (Part 2)](https://www.reddit.com/r/CryptoCurrency/comments/oiv9dx/break_my_contract_steal_my_money_a_solidity/) 145 | 146 | * [Hacking smart contracts for fun and profit](https://gist.github.com/seresistvanandras/b66d3fd8c7681e8643e77ef8c5b9f634) by [István András Seres](https://gist.github.com/seresistvanandras) 147 | 148 | * [Challenges by @robot_dreams](https://twitter.com/robot__dreams/status/1479518204036669441) 149 | 150 | ## CTFs and Writeups 151 | 152 | * [Sherlock CTF](https://ctf.sherlock.xyz/scoreboard) 153 | * [Solutions](https://github.com/sherlock-protocol/sherlock-ctf-0x0) 154 | 155 | * [The Standoff Digital Art Competition](https://nft.standoff365.com/) 156 | * [Разбор заданий конкурса на взлом NFT “The Standoff Digital Art”](https://habr.com/ru/company/pt/blog/590301/) 157 | 158 | * [Paradigm CTF](https://ctf.paradigm.xyz/) - 2021 159 | * Official Challenges and Solutions: 160 | * [paradigm-ctf-2021](https://github.com/paradigm-operations/paradigm-ctf-2021) 161 | * Community Solutions: 162 | * [Paradigm CTF 2021 Solutions](https://cmichel.io/paradigm-ctf-2021-solutions/) and [Github repo](https://github.com/MrToph/paradigm-ctf) by cmichel 163 | * [BabyRev and Upgrade Solutions](https://hackmd.io/@adietrichs/paradigm-ctf-2021) by Ansgar Dietrichs 164 | * [Paradigm JOP Solution on Twitch [Part 1](https://www.twitch.tv/videos/906353891) and [Part 2](https://www.twitch.tv/videos/907645638) by Ansgar Dietrichs 165 | * [Paradigm CTF 2021 Solutions](https://github.com/thegostep/paradigm-ctf) by thegostep 166 | * [BabyCrypto, BabySandbox, and Lockbox writeups](https://gist.github.com/roynalnaruto/3687e0ab19c22ecbc32f0dcff5790198) by roynalnaruto 167 | * [BabyCrypto Challenge](https://binarycake.ca/posts/paradigm-ctf/) by Team Dilicious (Sam Wilson) 168 | * [Broker Challenge](https://binarycake.ca/posts/paradigm-ctf-broker/) by Team Dilicious (Sam Wilson) 169 | * [BabyRev Challenge](https://binarycake.ca/posts/paradigm-ctf-babyrev/index.html) by Team Dilicious (Sam Wilson) 170 | * [Bank Challenge](https://smarx.com/posts/2021/02/writeup-of-paradigm-ctf-bank/) by Team Dilicious (smarx) 171 | * [Vault Challenge](https://smarx.com/posts/2021/02/writeup-of-paradigm-ctf-vault/) by Team Dilicious (smarx) 172 | * [Paradigm CTF Solutions](https://medium.com/furucombo/sharing-some-paradigm-ctf-solutions-befac01800e3) by Furucombo 173 | * [Swap Challenge](https://samczsun.com/paradigm-ctf-2021-swap/) by samczsun 174 | 175 | * [0xPOLAND](https://0xpoland.dev/) - 2020 176 | * [0xPOLAND — Adventure Awaits by iphelix](https://iphelix.medium.com/0xpoland-adventure-awaits-338ffc834d80) 177 | 178 | * [AnChain CTF](https://www.anchain.ai/defi-detectives) - 2020 179 | * [DeFi Detectives: Chef Nomi Investigation Notes by iphelix](https://iphelix.medium.com/defi-detectives-chef-nomi-investigation-notes-9468792b5f29) 180 | * [DeFi Detectives: Discovering the Secrets of the DeFi Ecosystem](https://anchainai.medium.com/defi-detectives-discovering-the-secrets-of-the-defi-ecosystem-f227e5c8038a) 181 | * [Congratulations Bitcoin Bounty Hunters! The World’s First Blockchain Investigation Contest.](https://anchainai.medium.com/congratulations-bitcoin-bounty-hunters-the-worlds-first-blockchain-investigation-contest-a271d84fcc05) 182 | 183 | * [Sharky CTF](https://ctftime.org/ctf/439) - 2020 184 | * [Sharky CTF: Blockchain Level 0 to 4 Writeup](https://medium.com/zh3r0/sharky-ctf-blockchain-level-0-to-4-writeup-524b728709d0) by Nithilan Pugal 185 | * [Sharky CTF Blockchain Challenges](https://imagin.vip/?p=1380) by Imagin 186 | 187 | * [CipherShastra CTF](https://ciphershastra.com/) 188 | * [Sherlock](https://ciphershastra.com/sherlock.html) 189 | * [Minion](https://ciphershastra.com/minion.html) 190 | * [Limitless](https://ciphershastra.com/limitless.html) 191 | * [Shilpkaar](https://ciphershastra.com/shilpkaar.html) 192 | * [UnDeAD](https://ciphershastra.com/UnDeAD.html) 193 | * [ThirtyFive](https://ciphershastra.com/ThirtyFive.html) 194 | * [Maya](https://ciphershastra.com/Maya.html) 195 | 196 | * [Donjon CTF](https://donjon-ctf.io/) - 2020 197 | * [CTF 2020: Capture the Fortress](https://donjon.ledger.com/Capture-the-Fortress/) 198 | * [Ledger Donjon CTF: Rationale and Winners!](https://www.ledger.com/blog/ledger-donjon-ctf-2020-challenges-and-winners) 199 | 200 | * [Chain Heist](https://chainheist.com) - 2019 201 | * [Chain Heist and blockchain security at DEF CON 2019](https://www.synopsys.com/blogs/software-security/chain-heist-blockchain-security/) 202 | * [Chain Heist CTF Writeup by iphelix](https://iphelix.medium.com/chain-heist-writeup-4f008cd6d346) 203 | 204 | * [Capture the Coin](https://capturethecoin.org) - 2019 205 | * [“Capture the Coin” at Defcon and you could win big](https://blog.coinbase.com/capture-the-coin-at-defcon-and-you-could-win-big-2de5a616929a) 206 | * [How the Coinbase Security team deployed CTFd to Power our First Capture the Flag contest at Defcon 27](https://blog.coinbase.com/how-the-coinbase-security-team-deployed-ctfd-to-power-our-first-capture-the-flag-contest-at-defcon-eeb8da3bf2b0) 207 | * [Congratulations Capture the Coin participants!](https://blog.coinbase.com/congratulations-capture-the-coin-participants-2028b2e5d14c) 208 | * [Capture the Coin — Trivia Solutions](https://blog.coinbase.com/capture-the-coin-trivia-solutions-98fd99aadb75) 209 | * [Capture the Coin — Blockchain Category Solutions](https://blog.coinbase.com/capture-the-coin-blockchain-category-solutions-9aef880d7e00) 210 | * [Capture the Coin — Cryptography Category Solutions](https://blog.coinbase.com/capture-the-coin-cryptography-category-solutions-fe94d82165c5) 211 | * [Capture the Coin CTF write-up](https://medium.com/@arpox/capture-the-coin-ctf-write-up-29bc32bc9546) by Arpox 212 | 213 | * [ConsenSys Dilligence Ethereum Hacking Challenge](https://medium.com/consensys-diligence/consensys-diligence-ether-giveaway-1-4985627b7726) - 2018 214 | * [Consensys CTF Writeup by samczsun](https://samczsun.com/consensys-ctf-writeup/) 215 | 216 | * Code Blue PolySwarm Challenge - 2018 217 | * [PolySwarm Smart Contract Hacking Challenge Writeup](https://raz0r.name/writeups/polyswarm-smart-contract-hacking-challenge-writeup/) by Arseny Reutov 218 | 219 | 220 | * Real World CTF (Acoraida Monica Challenge) - 2018 221 | * [Challenge files and Solution](https://gist.github.com/LiveOverflow/21c8a505ca176e5bb20bc94eb23acdf1) by LiveOverflow 222 | * [Ethereum Smart Contract Code Review #1 - Real World CTF 2018](https://www.youtube.com/watch?v=ozqOlUVKL1s) by LiveOverflow 223 | * [Jump Oriented Programming: Ethereum Smart Contract #2 - Real World CTF 2018](https://www.youtube.com/watch?v=RfL3FcnVbJg) by LiveOverflow 224 | 225 | * Authio Solidity CTF 226 | * Challenges: 227 | * [Part 1 - Function Types](https://ropsten.etherscan.io/address/0x727c1c8d4b190d208f3701f106f7301cb1a32f27#code) 228 | * [Part 2 - Safe Execution](https://ropsten.etherscan.io/address/0x023916f968af3fbb21ac10abbe18448c79d609c2#code) 229 | * [Part 3 - HoneyPot](https://ropsten.etherscan.io/address/0xdc65b61be773f8be72ded22ac008ad5add045e3c#code) 230 | * [Part 4 - Read the Fine Print](https://ropsten.etherscan.io/address/0x1b359afb0bd86a6c435d178b1fbf8a6fda3ead7d#code) 231 | * [Part 5 - Mirror Madness](https://etherscan.io/address/0x7cd03C9f1D2dc95358B1992e9afc857aeaab45D5) 232 | * [Solidity CTF - Part 1: "Function Types](https://www.reddit.com/r/ethdev/comments/8td9xn/challenge_empty_the_contract_of_funds/) 233 | * [Solidity CTF — Part 2: “Safe Execution”](https://medium.com/authio/solidity-ctf-part-2-safe-execution-ad6ded20e042)by Alexander Wade 234 | * [Solidity CTF — Part 3: “HoneyPot”](https://medium.com/authio/solidity-ctf-part-3-honeypot-8a8b6fecc6a2) by Alexander Wade 235 | * [Solidity CTF — Part 4: Read the Fine Print](https://medium.com/authio/solidity-ctf-part-4-read-the-fine-print-5ad259a5f5bb) by Alex Towle 236 | * [Solidity CTF - Part 5: Mirror Madness](https://medium.com/authio/ctf-duplication-dd32cd4ef690) by Paul Vienhage 237 | 238 | * ZeroNights ICO Hacking Contest - 2017 239 | * [ZeroNights ICO Hacking Contest Writeup](https://blog.positive.com/zeronights-ico-hacking-contest-writeup-63afb996f1e3) by Arseny Reutov 240 | --------------------------------------------------------------------------------