https://stermi.xyz RSS for Node Tue, 17 Mar 2026 08:52:42 GMT https://stermi.xyz/blog/aave-bug-bounty-ltv0-griefing-attack https://stermi.xyz/blog/aave-bug-bounty-ltv0-griefing-attack Sun, 03 Sep 2023 17:00:00 GMT https://stermi.xyz/blog/fun-on-chain-investigation-about-paypal-pyusd https://stermi.xyz/blog/fun-on-chain-investigation-about-paypal-pyusd Thu, 31 Aug 2023 17:00:00 GMT https://stermi.xyz/blog/aave-bug-bounty-wrong-debtprice-in-liquidation-emode https://stermi.xyz/blog/aave-bug-bounty-wrong-debtprice-in-liquidation-emode Sun, 27 Aug 2023 17:00:00 GMT https://stermi.xyz/blog/aave-bug-bounty-executeflashloan-improvement https://stermi.xyz/blog/aave-bug-bounty-executeflashloan-improvement Sun, 20 Aug 2023 19:27:00 GMT
Are you ready to solve some riddles and learn more about signature security?.]]> https://stermi.xyz/blog/coinbase-ctf-ethdenver-2023 https://stermi.xyz/blog/coinbase-ctf-ethdenver-2023 Mon, 06 Mar 2023 18:00:00 GMT
Our goal is to be able to mint tons of `Meal`. It won't be easy because each meal costs 1e6 tokens and only owns 10 of them 😐.]]> https://stermi.xyz/blog/eko2022-ctf-metaverse-supermarket-solution https://stermi.xyz/blog/eko2022-ctf-metaverse-supermarket-solution Wed, 01 Mar 2023 18:00:00 GMT
Our goal is to be able to capture this strange monster called Phoenixtto.]]> https://stermi.xyz/blog/eko2022-ctf-phoenixtto-solution https://stermi.xyz/blog/eko2022-ctf-phoenixtto-solution Sun, 19 Feb 2023 18:00:00 GMT
We need to find a way to steal all the DVT token in the Climber Vault.]]> https://stermi.xyz/blog/damn-vulnerable-defi-challenge-12-solution-climber https://stermi.xyz/blog/damn-vulnerable-defi-challenge-12-solution-climber Sat, 14 Jan 2023 07:00:00 GMT
We need to find a way to steal all the DVT token in the Gnosis Safe wallet created.]]> https://stermi.xyz/blog/damn-vulnerable-defi-challenge-11-solution-backdoor https://stermi.xyz/blog/damn-vulnerable-defi-challenge-11-solution-backdoor Mon, 02 Jan 2023 07:00:00 GMT
Let’s solve some CTF while learning more about Smart Contract security!]]> https://stermi.xyz/blog/lets-play-ethernautdao-ctf https://stermi.xyz/blog/lets-play-ethernautdao-ctf Wed, 21 Dec 2022 09:00:00 GMT
The goal of the challenge is to be able to drain the contract's balance.]]> https://stermi.xyz/blog/ethernautdao-ctf-etherwallet-solution https://stermi.xyz/blog/ethernautdao-ctf-etherwallet-solution Thu, 06 Oct 2022 07:00:00 GMT
In this challenge we need to exploit an ERC721 token called VNFT (Vulnerable NFT). The goal of the challenge is to be able to mint an NFT via `whitelistMint` or via `imFeelingLucky`. .]]> https://stermi.xyz/blog/ethernautdao-ctf-vnft-solution https://stermi.xyz/blog/ethernautdao-ctf-vnft-solution Tue, 27 Sep 2022 07:00:00 GMT
The goal of the challenge is to gain ownership of the contract, overriding the value of the `owner` state variable.]]> https://stermi.xyz/blog/ethernautdao-ctf-switch-solution https://stermi.xyz/blog/ethernautdao-ctf-switch-solution Fri, 19 Aug 2022 07:00:00 GMT
The goal of the challenge is to figure out where the bug is in `CryptoVault` and protect it from being drained out of tokens.]]> https://stermi.xyz/blog/ethernaut-challenge-24-solution-double-entry-point https://stermi.xyz/blog/ethernaut-challenge-24-solution-double-entry-point Thu, 18 Aug 2022 07:00:00 GMT
The goal of this challenge is to be able to become the owner of the proxy contract.]]> https://stermi.xyz/blog/ethernaut-challenge-23-solution-puzzle-wallet https://stermi.xyz/blog/ethernaut-challenge-23-solution-puzzle-wallet Tue, 16 Aug 2022 07:00:00 GMT
The goal of this challenge is to be able to steal all the tokens inside the Dex. The level starts with the Dex owning (as liquidity) 100 tokens of both `token1` and `token2` while we own just 10 of each.]]> https://stermi.xyz/blog/ethernaut-challenge-22-solution-dex-two https://stermi.xyz/blog/ethernaut-challenge-22-solution-dex-two Fri, 12 Aug 2022 07:00:00 GMT
The goal of this challenge is to be able to steal all the tokens inside the Dex. The level starts with the Dex owning (as liquidity) 100 tokens of both `token1` and `token2` while we own just 10 of each.]]> https://stermi.xyz/blog/ethernaut-challenge-21-solution-dex https://stermi.xyz/blog/ethernaut-challenge-21-solution-dex Thu, 11 Aug 2022 07:00:00 GMT
The goal of this challenge is to find a way to buy the item from the `Shop` contract for a price lower compared to the one for which the item is sold.]]> https://stermi.xyz/blog/ethernaut-challenge-20-solution-shop https://stermi.xyz/blog/ethernaut-challenge-20-solution-shop Wed, 10 Aug 2022 07:00:00 GMT
To solve this challenge, we need to create and deploy a smart contract that weight less than 10 bytes and answer `42` when `whatIsTheMeaningOfLife` function is called.]]> https://stermi.xyz/blog/ethernaut-challenge-19-solution-denial https://stermi.xyz/blog/ethernaut-challenge-19-solution-denial Tue, 09 Aug 2022 07:00:00 GMT
Our goal is to be able to solve the challenge, become the `winner` and flip the value of `done` from `false` to `true`.]]> https://stermi.xyz/blog/ethernautdao-ctf-hackable-solution https://stermi.xyz/blog/ethernautdao-ctf-hackable-solution Mon, 08 Aug 2022 07:00:00 GMT
To solve this challenge, we need to create and deploy a smart contract that weight less than 10 bytes and answer `42` when `whatIsTheMeaningOfLife` function is called.]]> https://stermi.xyz/blog/ethernaut-challenge-18-solution-magic-number https://stermi.xyz/blog/ethernaut-challenge-18-solution-magic-number Fri, 05 Aug 2022 07:00:00 GMT
The goal of this challenge is to be able to retrieve the lost address of the first token created by the Token Factory and drain `0.001 ETH` that have been sent to it.]]> https://stermi.xyz/blog/ethernaut-challenge-17-solution-recovery https://stermi.xyz/blog/ethernaut-challenge-17-solution-recovery Thu, 04 Aug 2022 07:00:00 GMT
Our goal is to be able to drain a wallet balance.]]> https://stermi.xyz/blog/ethernautdao-ctf-ethernautdao-token-solution https://stermi.xyz/blog/ethernautdao-ctf-ethernautdao-token-solution Wed, 03 Aug 2022 07:00:00 GMT
We have tons of `NaughtCoin` tokens in our balance but we cannot withdraw them for **10 years**. The goal of this challenge is to find a way to withdraw them skipping the lock period.]]> https://stermi.xyz/blog/ethernaut-challenge-16-solution-preservation https://stermi.xyz/blog/ethernaut-challenge-16-solution-preservation Tue, 02 Aug 2022 07:00:00 GMT
We have tons of `NaughtCoin` tokens in our balance but we cannot withdraw them for **10 years**. The goal of this challenge is to find a way to withdraw them skipping the lock period.]]> https://stermi.xyz/blog/ethernaut-challenge-15-solution-naught-coin https://stermi.xyz/blog/ethernaut-challenge-15-solution-naught-coin Mon, 01 Aug 2022 07:00:00 GMT
The goal is to drain all the balance from the contract.]]> https://stermi.xyz/blog/ethernautdao-ctf-vending-machine https://stermi.xyz/blog/ethernautdao-ctf-vending-machine Tue, 26 Jul 2022 09:00:00 GMT
Throughout numerous challenges, you will build the skills to become a bug hunter or security auditor in the space.]]> https://stermi.xyz/blog/lets-play-damn-vulnerable-defi https://stermi.xyz/blog/lets-play-damn-vulnerable-defi Tue, 26 Jul 2022 09:00:00 GMT
Similar to Gatekeeper One to solve this challenge we need to open three diffent "gates", each one with a different requirement. Bear with me because they are pretty tough.]]> https://stermi.xyz/blog/ethernaut-challenge-14-solution-gatekeeper-two https://stermi.xyz/blog/ethernaut-challenge-14-solution-gatekeeper-two Tue, 26 Jul 2022 07:53:00 GMT
To solve this challenge we need to open three diffent "gates", each one with a different requirement. Bear with me because they are pretty tough.]]> https://stermi.xyz/blog/ethernaut-challenge-13-solution-gatekeeper-one https://stermi.xyz/blog/ethernaut-challenge-13-solution-gatekeeper-one Mon, 25 Jul 2022 07:00:00 GMT
The goal of this challenge is to be able to unlock `Privacy` contract by discovering the "secret" `key` stored in it.]]> https://stermi.xyz/blog/ethernaut-challenge-12-solution-privacy https://stermi.xyz/blog/ethernaut-challenge-12-solution-privacy Fri, 22 Jul 2022 07:00:00 GMT
The goal of this challenge is to be able to reach the top floor of the building.]]> https://stermi.xyz/blog/ethernaut-challenge-11-solution-elevator https://stermi.xyz/blog/ethernaut-challenge-11-solution-elevator Thu, 21 Jul 2022 07:00:00 GMT
The goal for this challenge is to be able to **mint and owns** two different cars. This mean that we need to find a way to gather `100_000 Token` to purchase the second car.]]> https://stermi.xyz/blog/ethernautdao-ctf-car-market-solution https://stermi.xyz/blog/ethernautdao-ctf-car-market-solution Wed, 20 Jul 2022 07:00:00 GMT
To solve this challenge, we must **steal all the funds** from the contract.]]> https://stermi.xyz/blog/ethernaut-challenge-10-solution-reentancy https://stermi.xyz/blog/ethernaut-challenge-10-solution-reentancy Tue, 19 Jul 2022 07:00:00 GMT
Our goal for this challenge is to **break** the smart contract to make it impossible for someone else to gain the kingship again in the future.]]> https://stermi.xyz/blog/ethernaut-challenge-9-solution-king https://stermi.xyz/blog/ethernaut-challenge-9-solution-king Fri, 15 Jul 2022 07:00:00 GMT
The goal for this challenge is to be able to guess the `Vault` secret password and unlock it.]]> https://stermi.xyz/blog/ethernaut-challenge-8-solution-vault https://stermi.xyz/blog/ethernaut-challenge-8-solution-vault Thu, 14 Jul 2022 07:00:00 GMT
Our goal is to be able to add **ourselves** to the list of the owners and execute a transaction.]]> https://stermi.xyz/blog/ethernautdao-ctf-wallet-solution https://stermi.xyz/blog/ethernautdao-ctf-wallet-solution Wed, 13 Jul 2022 07:00:00 GMT
Our only goal is to **find a way to send ETH** to the `Force` contract.]]> https://stermi.xyz/blog/ethernaut-challenge-7-solution-force https://stermi.xyz/blog/ethernaut-challenge-7-solution-force Tue, 12 Jul 2022 07:00:00 GMT
Our goal for this challenge is to be able to take the ownership of the contract by calling the function `takeOwnership` and then withdraw all the contract's funds by calling the `withdraw` function that can be called only by the owner of the contract.]]> https://stermi.xyz/blog/ethernautdao-ctf-private-data-solution https://stermi.xyz/blog/ethernautdao-ctf-private-data-solution Mon, 11 Jul 2022 07:00:00 GMT
In this challenge, we don't need any token/ETH to solve it. Our only goal is to **claim ownership** of the `Delegation` contract.]]> https://stermi.xyz/blog/ethernaut-challenge-6-solution-delegation https://stermi.xyz/blog/ethernaut-challenge-6-solution-delegation Fri, 08 Jul 2022 07:00:00 GMT
For this challenge, our end goal is to be able to claim the ownership of the contract. ]]> https://stermi.xyz/blog/ethernaut-challenge-5-solution-token https://stermi.xyz/blog/ethernaut-challenge-5-solution-token Thu, 07 Jul 2022 07:00:00 GMT
For this challenge, our end goal is to be able to claim the ownership of the contract. ]]> https://stermi.xyz/blog/ethernaut-challenge-4-solution-telephone https://stermi.xyz/blog/ethernaut-challenge-4-solution-telephone Tue, 05 Jul 2022 07:00:00 GMT
For this challenge, our end goal is to be able to consecutively guess the coin flip result by calling the `flip()` function passing the correct guess. ]]> https://stermi.xyz/blog/ethernaut-challenge-3-solution-coin-flip https://stermi.xyz/blog/ethernaut-challenge-3-solution-coin-flip Fri, 01 Jul 2022 07:00:00 GMT
The goal of this challenge is to claim ownership of the `Fallback` contract and reduce its balance to 0. ]]> https://stermi.xyz/blog/ethernaut-challenge-1-solution-fallback https://stermi.xyz/blog/ethernaut-challenge-1-solution-fallback Thu, 30 Jun 2022 07:00:00 GMT
The goal of this challenge is to claim ownership of the `Fallout` contract. ]]> https://stermi.xyz/blog/ethernaut-challenge-2-solution-fallout https://stermi.xyz/blog/ethernaut-challenge-2-solution-fallout Thu, 30 Jun 2022 07:00:00 GMT https://stermi.xyz/blog/lets-play-openzeppelin-ethernaut https://stermi.xyz/blog/lets-play-openzeppelin-ethernaut Wed, 29 Jun 2022 07:00:00 GMT https://stermi.xyz/blog/evm-puzzle-10-solution https://stermi.xyz/blog/evm-puzzle-10-solution Wed, 22 Jun 2022 07:00:00 GMT https://stermi.xyz/blog/evm-puzzle-9-solution https://stermi.xyz/blog/evm-puzzle-9-solution Tue, 21 Jun 2022 07:00:00 GMT https://stermi.xyz/blog/evm-puzzle-8-solution https://stermi.xyz/blog/evm-puzzle-8-solution Mon, 20 Jun 2022 07:00:00 GMT https://stermi.xyz/blog/evm-puzzle-7-solution https://stermi.xyz/blog/evm-puzzle-7-solution Sat, 18 Jun 2022 07:00:00 GMT https://stermi.xyz/blog/evm-puzzle-6-solution https://stermi.xyz/blog/evm-puzzle-6-solution Fri, 17 Jun 2022 07:00:00 GMT https://stermi.xyz/blog/evm-puzzle-5-solution https://stermi.xyz/blog/evm-puzzle-5-solution Thu, 16 Jun 2022 07:00:00 GMT https://stermi.xyz/blog/evm-puzzle-4-solution https://stermi.xyz/blog/evm-puzzle-4-solution Wed, 15 Jun 2022 07:00:00 GMT https://stermi.xyz/blog/evm-puzzle-3-solution https://stermi.xyz/blog/evm-puzzle-3-solution Tue, 14 Jun 2022 07:00:00 GMT https://stermi.xyz/blog/evm-puzzle-2-solution https://stermi.xyz/blog/evm-puzzle-2-solution Sun, 12 Jun 2022 07:00:00 GMT https://stermi.xyz/blog/evm-puzzle-1-solution https://stermi.xyz/blog/evm-puzzle-1-solution Fri, 10 Jun 2022 07:00:00 GMT https://stermi.xyz/blog/lets-play-evm-puzzles https://stermi.xyz/blog/lets-play-evm-puzzles Thu, 09 Jun 2022 07:00:00 GMT
We start with 25 ETH and 1000 DVTs in balance and we need to drain all the Pool 100000 DVTs.]]> https://stermi.xyz/blog/damn-vulnerable-defi-challenge-10-solution-free-rider https://stermi.xyz/blog/damn-vulnerable-defi-challenge-10-solution-free-rider Sun, 05 Jun 2022 07:00:00 GMT
We start with 25 ETH and 1000 DVTs in balance and we need to drain all the Pool 100000 DVTs.]]> https://stermi.xyz/blog/damn-vulnerable-defi-challenge-8-solution-puppet https://stermi.xyz/blog/damn-vulnerable-defi-challenge-8-solution-puppet Mon, 23 May 2022 07:00:00 GMT
We start with zero DVT token, and our end goal is to drain all the DVT funds present in the Lending Pool.]]> https://stermi.xyz/blog/damn-vulnerable-defi-challenge-6-solution-selfie https://stermi.xyz/blog/damn-vulnerable-defi-challenge-6-solution-selfie Sat, 23 Apr 2022 07:00:00 GMT
You don’t have any DVT tokens. But in the upcoming round, you must claim most rewards for yourself.]]> https://stermi.xyz/blog/damn-vulnerable-defi-challenge-5-solution-the-rewarder https://stermi.xyz/blog/damn-vulnerable-defi-challenge-5-solution-the-rewarder Mon, 18 Apr 2022 07:00:00 GMT
The endgoal of this challenge is to leverage the free (no fee) flashloans to drain the pool.]]> https://stermi.xyz/blog/damn-vulnerable-defi-challenge-4-solution-side-entrance https://stermi.xyz/blog/damn-vulnerable-defi-challenge-4-solution-side-entrance Tue, 12 Apr 2022 07:00:00 GMT
Our end goal here is to attack the pool to drain all the 1 million DTV tokens available in the balance.]]> https://stermi.xyz/blog/damn-vulnerable-defi-challenge-3-solution-truster https://stermi.xyz/blog/damn-vulnerable-defi-challenge-3-solution-truster Sun, 10 Apr 2022 07:00:00 GMT
Our end goal here is to attack the user contract and drain all their funds. Draining doesn’t mean necessarily stealing those funds, it could simply mean, like in this case, to move user’s funds from their contract without their will.]]> https://stermi.xyz/blog/damn-vulnerable-defi-challenge-2-solution-naive-receiver https://stermi.xyz/blog/damn-vulnerable-defi-challenge-2-solution-naive-receiver Mon, 04 Apr 2022 07:00:00 GMT
Our end goal in this challenge is to DOS (Denial of Service) the contract, preventing anyone to interact with it. ]]> https://stermi.xyz/blog/damn-vulnerable-defi-challenge-1-solution-unstoppable https://stermi.xyz/blog/damn-vulnerable-defi-challenge-1-solution-unstoppable Sat, 02 Apr 2022 07:00:00 GMT