Hi there, I am StErMi developer, maker and author.

Aave v3 bug bounty part 3: `LTV-0` `AToken` poison attack!

An attacker can poison a user by sending just `1 wei` of an `AToken` with LTV equal to 0. When the victim has been poisoned, it won't be able to perform vital operations like `withdraw`, `transfer` or `setUserUseReserveAsCollateral` if such operations involve a non-0-LTV `AToken`.

A fun on-chain investigation about PayPal `PYUSD` smart contract

Do you want to know more about the odd things I have found while digging this dark forest? Buckle up and follow me into this rabbit hole!

Aave v3 bug bounty part 2: Aave liquidation process uses the wrong `debtPriceSource` if the user is in e-mode, the e-mode has a custom oracle and the debt token has been removed from the e-mode category

Learn more about how the liquidation process of Aave could end up using the wrong debt token price when the user is in e-mode and the debt token is removed from the e-mode category. If you like to think about edge case, this is the blog post for you!

Aave v3 bug bounty part 1: Security concerns and improvements about the `executeFlashLoan` function

During the flashloan action, Aave is incorrectly calculating the flash loans fees `totalPremiums` that the user has to repay after the execution when the user has decided that for that specific asset it will **open a borrow position**.

Coinbase CTF for ETHDenver 2023 - Riddle Bounty

Riddle Bounty is a CTF developed by Coinbase for the ETH Denver 2023 conference.

Are you ready to solve some riddles and learn more about signature security?.

EKO2022 Enter the metaverse CTF Challenge 2 — Metaverse Supermarket

EKO2022 Enter the metaverse is a collection of challenges made for the EKOparty 2022 submited by some gigabrain hackers

Our goal is to be able to mint tons of `Meal`. It won't be easy because each meal costs 1e6 tokens and only owns 10 of them 😐.

EKO2022 Enter the metaverse CTF Challenge 1 — Phoenixtto

EKO2022 Enter the metaverse is a collection of challenges made for the EKOparty 2022 submited by some gigabrain hackers

Our goal is to be able to capture this strange monster called Phoenixtto.

Damn Vulnerable DeFi Challenge #12 Solution — Climber

Damn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.

We need to find a way to steal all the DVT token in the Climber Vault.

Damn Vulnerable DeFi Challenge #11 Solution — Backdoor

Damn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.

We need to find a way to steal all the DVT token in the Gnosis Safe wallet created.

Let’s play EthernautDAO CTF — learning Solidity security while playing!

ΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers.

Let’s solve some CTF while learning more about Smart Contract security!

EthernautDAO CTF 9 — EtherWallet

ΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers.

The goal of the challenge is to be able to drain the contract's balance.

EthernautDAO CTF 8 — Vulnerable NFT

ΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers.

In this challenge we need to exploit an ERC721 token called VNFT (Vulnerable NFT). The goal of the challenge is to be able to mint an NFT via `whitelistMint` or via `imFeelingLucky`. .

EthernautDAO CTF 7 — Switch

ΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers.

The goal of the challenge is to gain ownership of the contract, overriding the value of the `owner` state variable.

Ethernaut Challenge #24 Solution — Double Entry Point

This is Part 24 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

The goal of the challenge is to figure out where the bug is in `CryptoVault` and protect it from being drained out of tokens.

Ethernaut Challenge #23 Solution — Puzzle Wallet

This is Part 23 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

The goal of this challenge is to be able to become the owner of the proxy contract.

Ethernaut Challenge #22 Solution — Dex Two

This is Part 22 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

The goal of this challenge is to be able to steal all the tokens inside the Dex. The level starts with the Dex owning (as liquidity) 100 tokens of both `token1` and `token2` while we own just 10 of each.

Ethernaut Challenge #21 Solution — Dex

This is Part 21 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

The goal of this challenge is to be able to steal all the tokens inside the Dex. The level starts with the Dex owning (as liquidity) 100 tokens of both `token1` and `token2` while we own just 10 of each.

Ethernaut Challenge #20 Solution — Shop

This is Part 20 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

The goal of this challenge is to find a way to buy the item from the `Shop` contract for a price lower compared to the one for which the item is sold.

Ethernaut Challenge #19 Solution — Denial

This is Part 19 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

To solve this challenge, we need to create and deploy a smart contract that weight less than 10 bytes and answer `42` when `whatIsTheMeaningOfLife` function is called.

EthernautDAO CTF 6 — Hackable Contract Solution

ΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers.

Our goal is to be able to solve the challenge, become the `winner` and flip the value of `done` from `false` to `true`.

Ethernaut Challenge #18 Solution — Magic Number

This is Part 18 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

To solve this challenge, we need to create and deploy a smart contract that weight less than 10 bytes and answer `42` when `whatIsTheMeaningOfLife` function is called.

Ethernaut Challenge #17 Solution — Recovery

This is Part 17 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

The goal of this challenge is to be able to retrieve the lost address of the first token created by the Token Factory and drain `0.001 ETH` that have been sent to it.

EthernautDAO CTF 5 — EthernautDAOToken Solution

ΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers.

Our goal is to be able to drain a wallet balance.

Ethernaut Challenge #16 Solution — Preservation

This is Part 16 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

We have tons of `NaughtCoin` tokens in our balance but we cannot withdraw them for **10 years**. The goal of this challenge is to find a way to withdraw them skipping the lock period.

Ethernaut Challenge #15 Solution — Naught Coin

This is Part 15 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

We have tons of `NaughtCoin` tokens in our balance but we cannot withdraw them for **10 years**. The goal of this challenge is to find a way to withdraw them skipping the lock period.

EthernautDAO CTF 4 — Vending Machine Solution

ΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers.

The goal is to drain all the balance from the contract.

Let’s play Damn Vulnerable DeFi CTF — learning Solidity security while playing!

Damn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.

Throughout numerous challenges, you will build the skills to become a bug hunter or security auditor in the space.

Ethernaut Challenge #14 Solution — Gatekeeper Two

This is Part 14 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

Similar to Gatekeeper One to solve this challenge we need to open three diffent "gates", each one with a different requirement. Bear with me because they are pretty tough.

Ethernaut Challenge #13 Solution — Gatekeeper One

This is Part 12 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

To solve this challenge we need to open three diffent "gates", each one with a different requirement. Bear with me because they are pretty tough.

Ethernaut Challenge #12 Solution — Privacy

This is Part 12 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

The goal of this challenge is to be able to unlock `Privacy` contract by discovering the "secret" `key` stored in it.

Ethernaut Challenge #11 Solution — Elevator

This is Part 11 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

The goal of this challenge is to be able to reach the top floor of the building.

EthernautDAO CTF 3 — Car Market Solution

ΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers.

The goal for this challenge is to be able to **mint and owns** two different cars. This mean that we need to find a way to gather `100_000 Token` to purchase the second car.

Ethernaut Challenge #10 Solution — Re-entrancy

This is Part 10 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

To solve this challenge, we must **steal all the funds** from the contract.

Ethernaut Challenge #9 Solution — King

This is Part 9 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

Our goal for this challenge is to **break** the smart contract to make it impossible for someone else to gain the kingship again in the future.

Ethernaut Challenge #8 Solution — Vault

This is Part 8 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

The goal for this challenge is to be able to guess the `Vault` secret password and unlock it.

EthernautDAO CTF 2 — Wallet Solution

ΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers.

Our goal is to be able to add **ourselves** to the list of the owners and execute a transaction.

Ethernaut Challenge #7 Solution — Force

This is Part 7 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

Our only goal is to **find a way to send ETH** to the `Force` contract.

EthernautDAO CTF 1 — Private Data Solution

ΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers.

Our goal for this challenge is to be able to take the ownership of the contract by calling the function `takeOwnership` and then withdraw all the contract's funds by calling the `withdraw` function that can be called only by the owner of the contract.

Ethernaut Challenge #6 Solution — Delegation

This is Part 6 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

In this challenge, we don't need any token/ETH to solve it. Our only goal is to **claim ownership** of the `Delegation` contract.

Ethernaut Challenge #5 Solution — Token

This is Part 5 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

For this challenge, our end goal is to be able to claim the ownership of the contract.

Ethernaut Challenge #4 Solution — Telephone

This is Part 4 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

For this challenge, our end goal is to be able to claim the ownership of the contract.

Ethernaut Challenge #3 Solution — Coin Flip

This is Part 2 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

For this challenge, our end goal is to be able to consecutively guess the coin flip result by calling the `flip()` function passing the correct guess.

Ethernaut Challenge #1 Solution — Fallback

This is Part 1 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

The goal of this challenge is to claim ownership of the `Fallback` contract and reduce its balance to 0.

Ethernaut Challenge #2 Solution — Fallout

This is Part 2 of the "Let’s play OpenZeppelin Ethernaut CTF" series, where I will explain how to solve each challenge.

The goal of this challenge is to claim ownership of the `Fallout` contract.

Let’s play OpenZeppelin Ethernaut CTF — learning Solidity security while playing!

The Ethernaut is a Web3/Solidity based war game created by OpenZeppelin. Each level is a smart contract that needs to be ‘hacked’. The game acts both as a tool for those interested in learning Ethereum, and as a way to catalog historical hacks in levels. Levels can be infinite, and the game does not require to be played in any particular order.

EVM Puzzle 10 solution

EVM Puzzles is a project developed by Franco Victorio (@fvictorio_nan) that is a perfect fit if you are in the process of learning how the Ethereum EVM works, and you want to apply some of the knowledge you have just acquired.

EVM Puzzle 9 solution

EVM Puzzles is a project developed by Franco Victorio (@fvictorio_nan) that is a perfect fit if you are in the process of learning how the Ethereum EVM works, and you want to apply some of the knowledge you have just acquired.

EVM Puzzle 8 solution

EVM Puzzles is a project developed by Franco Victorio (@fvictorio_nan) that is a perfect fit if you are in the process of learning how the Ethereum EVM works, and you want to apply some of the knowledge you have just acquired.

EVM Puzzle 7 solution

EVM Puzzles is a project developed by Franco Victorio (@fvictorio_nan) that is a perfect fit if you are in the process of learning how the Ethereum EVM works, and you want to apply some of the knowledge you have just acquired.

EVM Puzzle 6 solution

EVM Puzzles is a project developed by Franco Victorio (@fvictorio_nan) that is a perfect fit if you are in the process of learning how the Ethereum EVM works, and you want to apply some of the knowledge you have just acquired.

EVM Puzzle 5 solution

EVM Puzzles is a project developed by Franco Victorio (@fvictorio_nan) that is a perfect fit if you are in the process of learning how the Ethereum EVM works, and you want to apply some of the knowledge you have just acquired.

EVM Puzzle 4 solution

EVM Puzzles is a project developed by Franco Victorio (@fvictorio_nan) that is a perfect fit if you are in the process of learning how the Ethereum EVM works, and you want to apply some of the knowledge you have just acquired.

EVM Puzzle 3 solution

EVM Puzzles is a project developed by Franco Victorio (@fvictorio_nan) that is a perfect fit if you are in the process of learning how the Ethereum EVM works, and you want to apply some of the knowledge you have just acquired.

EVM Puzzle 2 solution

EVM Puzzles is a project developed by Franco Victorio (@fvictorio_nan) that is a perfect fit if you are in the process of learning how the Ethereum EVM works, and you want to apply some of the knowledge you have just acquired.

EVM Puzzle 1 solution

EVM Puzzles is a project developed by Franco Victorio (@fvictorio_nan) that is a perfect fit if you are in the process of learning how the Ethereum EVM works, and you want to apply some of the knowledge you have just acquired.

Let’s play EVM Puzzles — learning Ethereum EVM while playing!

EVM Puzzles is a project developed by Franco Victorio (@fvictorio_nan) that is a perfect fit if you are in the process of learning how the Ethereum EVM works, and you want to apply some of the knowledge you have just acquired.

Damn Vulnerable DeFi Challenge #10 Solution — Free rider

Damn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.

We start with 25 ETH and 1000 DVTs in balance and we need to drain all the Pool 100000 DVTs.

Damn Vulnerable DeFi Challenge #8 Solution — Puppet

Damn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.

We start with 25 ETH and 1000 DVTs in balance and we need to drain all the Pool 100000 DVTs.

Damn Vulnerable DeFi Challenge #6 Solution — Selfie

Damn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.

We start with zero DVT token, and our end goal is to drain all the DVT funds present in the Lending Pool.

Damn Vulnerable DeFi Challenge #5 Solution — The rewarder

Damn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.

You don’t have any DVT tokens. But in the upcoming round, you must claim most rewards for yourself.

Damn Vulnerable DeFi Challenge #4 Solution — Side entrance

Damn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.

The endgoal of this challenge is to leverage the free (no fee) flashloans to drain the pool.

Damn Vulnerable DeFi Challenge #3 Solution — Truster

Damn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.

Our end goal here is to attack the pool to drain all the 1 million DTV tokens available in the balance.

Damn Vulnerable DeFi Challenge #2 Solution — Naive receiver

Damn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.

Our end goal here is to attack the user contract and drain all their funds. Draining doesn’t mean necessarily stealing those funds, it could simply mean, like in this case, to move user’s funds from their contract without their will.

Damn Vulnerable DeFi Challenge #1 Solution — Unstoppable

Damn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.

Our end goal in this challenge is to DOS (Denial of Service) the contract, preventing anyone to interact with it.