Gershon Ballas·PinnedHow to hack (almost) any Starknet Cairo smart contractDisclaimer: This is not a hack in the underlying Starknet or Cairo architectures. Instead, it is a very common developer-introduced vulnerability that we’ve been seeing (and disclosing) in the wild. If you’re a Cairo developer — please read and understand this issue to prevent potential hacks in your dapps. All…Starknet5 min readStarknet5 min read
Johnny Time·Dec 5, 2022Access Control Vulnerabilities in Solidity Smart ContractsMaster Smart Contract Hacking Become a smart contract hacker 😎 → https://bit.ly/become-smh What is Solidity The Solidity programming language enables the development of Ethereum smart contracts. A smart contract defines the rules and conditions by which transactions and other interactions can take place on a blockchain. …Solidiity3 min readSolidiity3 min read
Johnny Time·Dec 1, 2022Damn Vulnerable DeFI 2022 Walkthrough — Challenge 2 Solution “Naive Receiver”Master Smart Contract Hacking Become a smart contract hacker 😎 → https://bit.ly/become-smh Damn Vulnerable DEFI 2 — Naive Receiver Welcome to the second Damn Vulnerable DeFI challenge walkthrough! In today’s article, I will show you how to hack the naive receiver smart contract step by step. The Damn Vulnerable DeFi teaches offensive security techniques for DeFi smart contracts. …Damn Vulnerable Defi4 min readDamn Vulnerable Defi4 min read
Elhanan Ballas·Nov 27, 2022How to hack Harvest Finance for $24M on your local machineTLDR 1. Someone stole $24M in 7 minutes from Harvest Finance vault. 2. They only stopped because they got bored, could have drained a lot more. 3. Flash swaps and bad contracts are a deadly combo. 4. I’m going to show you how you can replay the attack yourself with Hardhat…Crypto12 min readCrypto12 min read
Gershon Ballas·Nov 18, 2022How to find, exploit, and mitigate reentrancy vulnerabilities in smart contractsReentrancy attacks are some of the most lethal vulnerabilities known to the cryptoverse. Heck, the original DAO hack was a reentrancy exploitation (link). And unfortunately (or fortunately if you’re a bounty hunter / black-hat), despite years of them being known and understood, they still consistently happen in the wild. …Crypto5 min readCrypto5 min read
