Hello

Welcome to my learn-in-public blog. In this blog I would document my joruney of studying web3 security. Hope you find something useful.

The Rewarder

Greetings, fellow security researchers! I’m delighted to present to you the fifth installment of my Damn Vulnerable DeFi CTF write-up series. In this particular post, I’ll be your guide as we delve into solving Damn Vulnerable DeFi #5: The Rewarder. Goal We have a pool which allows users to deposit DVT tokens. It offers rewards every 5 days to all its depositors. Several users have already taken advantage of this opportunity and received their rewards....

Side Entrance

Hey there! I’m back with my fourth blog post in my Damn Vulnerable DeFi series. Today, I’ll guide you through hacking the Side Entrance challenge. Goal We have a simple pool that allows anyone to deposit and withdraw ETH. The pool has a balance of 1000 ETH. It also offers flash loans for free. We start with 1 ETH in balance and must take all ETH from the pool 🥷...

Truster

Welcome back! This is the third blog post from my Damn Vulnerable DeFi series. In this one, I would walk you through the process of hacking the Truster challenge. Goal In this challenge, we have a pool with 1 million DVT tokens. It provides flash loans for free! Our goal here is to hack the pool and drain all its DVT tokens. We start 0 DVTs. Rundown In this challenge we only have one contract - TrusterLenderPool....

Naive Receiver

In this blog post I would walk you through my solution and my thought process for the second Damn Vulnerable DeFi challenge - Naive Receiver. Goal In this challenge our objective is to drain all funds from the FlashLoanReceiver smart contract, which holds a balance of 10 ETH, using the NaiveReceiverLenderPool flash loan lending contract. The lending contract begins with a balance of 1000 ETH and charges a fixed fee of 1 ETH for each flash loan....

Unstoppable

Unstoppable This is the first from a series of blog posts in which I would document my Damn Vulnerable DeFi journey. Hope you find it helpful. Goal In this first challenge we are presented with a tokenized vault. The vault has 1 000 000 DVT tokens deposited. We (as a player) start with a balance of 10 DVT tokens. The vault offers free flash loans for a grace period of 30 days....