Mr Steal Yo Crypto — Side Entrance

This is the #14 challenge of Mr Steal Yo Crypto. I will try to explain how to find the vulnerability. A set of challenges to learn offensive security of smart contracts. Featuring interesting challenges loosely (or directly) inspired by real-world exploits. Created by @0xToshii I used the foundry version for this CTF: mr-steal-yo-crypto-ctf-foundry Side Entrance There’s a CallOptions contract which allows users to create covered wETH-USDC call options. ...

July 22, 2023 · 4 min · 731 words · Bretzel

Mr Steal Yo Crypto — Extractoor

This is the #16 challenge of Mr Steal Yo Crypto. I will try to explain how to find the vulnerability. A set of challenges to learn offensive security of smart contracts. Featuring interesting challenges loosely (or directly) inspired by real world exploits. Created by @0xToshii I used the foundry version for this CTF: mr-steal-yo-crypto-ctf-foundry Extractoor [redacted] has launched a dutch auction to sell 1_000_000 of their FARM tokens. So far one degen has aped in 900 ETH. ...

July 22, 2023 · 4 min · 748 words · Bretzel

Mr Steal Yo Crypto — Opyn Sesame

This is the #17 challenge of Mr Steal Yo Crypto. I will try to explain how to find the vulnerability. A set of challenges to learn offensive security of smart contracts. Featuring interesting challenges loosely (or directly) inspired by real world exploits. Created by @0xToshii. I used the foundry version for this CTF: mr-steal-yo-crypto-ctf-foundry. Opyn Sesame There’s an OptionsContract which allows users to issue ETH-USDC put options. It represents the premium for a given series of options as an ERC20 token, allowing for AMM pricing and liquidity. ...

July 22, 2023 · 4 min · 725 words · Bretzel

Mr Steal Yo Crypto — Safu Lender

This is the #20 challenge of Mr Steal Yo Crypto. I will try to explain how to find the vulnerability. A set of challenges to learn offensive security of smart contracts. Featuring interesting challenges loosely (or directly) inspired by real world exploits. Created by @0xToshii. I used the foundry version for this CTF: mr-steal-yo-crypto-ctf-foundry. Safu Lender [SETTING]: Following the exploit of Safu Labs’ vault, wallet & AMM products — at Safu Labs HQ. ...

July 22, 2023 · 3 min · 633 words · Bretzel