{
    "componentChunkName": "component---src-templates-category-template-js",
    "path": "/posts/Blockchain",
    "result": {"pageContext":{"currentCategory":"Blockchain","categories":["All","Blockchain","Solana","0-day","CLOUD","Web","projects","Talk","troubleshooting","Windows","AnalyzingBinaries","ARM","windows","1-day","CTF","Mobile","Tools","Theory","Language"],"edges":[{"node":{"id":"1cfd2cf1-ff79-586e-bf57-243519bd4f6e","excerpt":"Wargame Provider: @tinchoabbate Challenge #9 - Puppet v2 The developers of the last lending pool are saying that they’ve learned the lesson. And just released a new version! Now they’re using a Uniswap v2 exchange as a price oracle, along with the recommended utility libraries. That should be enough. You start with 20 ETH and 10000 DVT tokens in balance. The new\nlending pool has a million DVT tokens in balance. You know what to do\n;) See the contracts Complete the challenge Code Audit Transacti…","fields":{"slug":"/defi-wargame-9/"},"frontmatter":{"categories":"Blockchain","title":"Damn Vulnerable DeFi Wargame Challenge9 — PuppetV2 Contract Analysis 🍘","date":"August 10, 2022"}},"next":{"fields":{"slug":"/defi-wargame-8/"}},"previous":null},{"node":{"id":"9372d1ca-a503-53a3-9871-138d6b04397b","excerpt":"Wargame Provider: @tinchoabbate Challenge #8 - Puppet There’s a huge lending pool borrowing Damn Valuable Tokens\n(DVTs), where you first need to deposit twice the borrow amount in ETH\nas collateral. The pool currently has 100000 DVTs in liquidity. There’s a DVT market opened in an Uniswap v1 exchange, currently with 10 ETH and 10 DVT in liquidity. Starting with 25 ETH and 1000 DVTs in balance, you must steal all tokens from the lending pool. See the contracts Complete the challenge Code Audit T…","fields":{"slug":"/defi-wargame-8/"},"frontmatter":{"categories":"Blockchain","title":"Damn Vulnerable DeFi Wargame Challenge8 — Puppet Contract Analysis 🐦","date":"August 05, 2022"}},"next":{"fields":{"slug":"/uniswap-contract-event-graph/"}},"previous":{"fields":{"slug":"/defi-wargame-9/"}}},{"node":{"id":"b972778c-f576-5161-9969-51f6604116ed","excerpt":"SubGraph Decentralized protocol for indexing and querying data on the blockchain, starting with Ethereum Possible to inquire data that is difficult to inquire directly Uniswap complex smart contracts When it is difficult to read anything other than the underlying data directly from the blockchain, such as projects such as the Bored Ape Yacht Club NFT initiative Bored Ape Yacht Club Get the owner of a specific Ape Perform basic read operations on contracts such as getting Ape content URI or tota…","fields":{"slug":"/uniswap-contract-event-graph/"},"frontmatter":{"categories":"Blockchain","title":"UniswapV2 Smart Contract Subgraph event query","date":"August 04, 2022"}},"next":{"fields":{"slug":"/uniswap-contract/"}},"previous":{"fields":{"slug":"/defi-wargame-8/"}}},{"node":{"id":"aca02e18-f96b-528d-93b0-e4fde9635d9f","excerpt":"Overview How it works at the uniswap code level uniswap code structure method uniswap contract Core Contract: Pair Core Contract: Factory Periphery Contract: Router Core Contract SingleTone Factory, consists of several pairs where Factory is responsible for creation and indexing. Contracts with a smaller surface area are easier to reason about, more prone to bugs, and functionally better. This means that many desired properties of the system can be asserted directly in code, leaving little room…","fields":{"slug":"/uniswap-contract/"},"frontmatter":{"categories":"Blockchain","title":"UniswapV2 Smart Contract","date":"August 03, 2022"}},"next":{"fields":{"slug":"/defi-wargame-6/"}},"previous":{"fields":{"slug":"/uniswap-contract-event-graph/"}}},{"node":{"id":"89561d23-d132-589e-97d7-7094631e6016","excerpt":"Wargame Provider: @tinchoabbate Challenge #6 — Selfie  A new cool lending pool has launched! It’s now offering flash loans of DVT tokens. Wow, and it even includes a really fancy governance mechanism to control it. What could go wrong, right ? You start with no DVT tokens in balance, and the pool has 1.5 million. Your objective: take them all. See the contracts Complete the challenge Code Audit SelfiePool.sol Dependency The @Openzeppelin external library contract is dependent on ReentrancyGuard…","fields":{"slug":"/defi-wargame-6/"},"frontmatter":{"categories":"Blockchain","title":"Damn Vulnerable DeFi Wargame Challenge6 — Selfie Contract Analysis ⚔️","date":"August 02, 2022"}},"next":{"fields":{"slug":"/defi-wargame-7/"}},"previous":{"fields":{"slug":"/uniswap-contract/"}}},{"node":{"id":"768fcdf1-e990-509b-bd61-ce58e87b53fe","excerpt":"Wargame Provider: @tinchoabbate Challenge #7 — Compromised  While poking around a web service of one of the most popular DeFi projects in the space, you get a somewhat strange response from their server. This is a snippet: A related on-chain exchange is selling (absurdly overpriced) collectibles called “DVNFT”, now at 999 ETH each This price is fetched from an on-chain oracle, and is based on three trusted re   porters: . Starting with only 0.1 ETH in balance, you must steal all ETH available i…","fields":{"slug":"/defi-wargame-7/"},"frontmatter":{"categories":"Blockchain","title":"Damn Vulnerable DeFi Wargame Challenge7 — Compromised Contract Analysis 😶‍🌫️","date":"August 02, 2022"}},"next":{"fields":{"slug":"/solana-chain-Program-Web3-API/"}},"previous":{"fields":{"slug":"/defi-wargame-6/"}}},{"node":{"id":"71cd0a11-64e0-5b6b-8381-84f72e67440d","excerpt":"Wargame Provider: @tinchoabbate Challenge #5 — The rewarder There’s a pool offering rewards in tokens every 5 days for those who deposit their DVT tokens into it.\nAlice, Bob, Charlie and David have already deposited some DVT tokens, and have won their rewards!\nYou don’t have any DVT tokens. But in the upcoming round, you must claim most rewards for yourself.\nOh, by the way, rumours say a new pool has just landed on mainnet. Isn’t it offering DVT tokens in flash loans? See the contracts Complete…","fields":{"slug":"/defi-wargame-5/"},"frontmatter":{"categories":"Blockchain","title":"Damn Vulnerable DeFi Wargame Challenge5 — The Rewarder Contract Analysis 💝","date":"August 01, 2022"}},"next":{"fields":{"slug":"/Ovice.in-Picket-Static-Object-XSS-0-day-Vulnerability-Report/"}},"previous":{"fields":{"slug":"/solana-chain-Program-Web3-API/"}}},{"node":{"id":"a01aab9f-e080-5ff9-96b1-69fd595a5201","excerpt":"Wargame Provider: @tinchoabbate Challenge #4 — Side entrance A surprisingly simple lending pool allows anyone to deposit ETH, and withdraw it at any point in time.\nThis very simple lending pool has 1000 ETH in balance already, and is offering free flash loans using the deposited ETH to promote their system.\nYou must take all ETH from the lending pool. Code Audit SideEntranceLenderPool.sol Dependency The address contract of the openzeppelin library is used as a dependency. State Variable  It is …","fields":{"slug":"/defi-wargame-4/"},"frontmatter":{"categories":"Blockchain","title":"Damn Vulnerable DeFi Wargame Challenge4 — Side entrance Contract Analysis🤔","date":"July 30, 2022"}},"next":{"fields":{"slug":"/defi-wargame-3/"}},"previous":{"fields":{"slug":"/solana-chain-programs/"}}},{"node":{"id":"ee647e58-6973-5d73-8247-24dcc7057371","excerpt":"Wargame Provider: @tinchoabbate Challenge #3 — Truster More and more lending pools are offering flash loans. In this case, a new pool has launched that is offering flash loans of DVT tokens for free.\nCurrently the pool has 1 million DVT tokens in balance. And you have nothing.\nBut don’t worry, you might be able to take them all from the pool. In a single transaction. Code Audit TrusterLenderPool.sol  Dependency We are using the Address contract of the openzeppelin library as a dependency. State…","fields":{"slug":"/defi-wargame-3/"},"frontmatter":{"categories":"Blockchain","title":"Damn Vulnerable DeFi Wargame Challenge3 — Truster Contract Analysis🤔","date":"July 29, 2022"}},"next":{"fields":{"slug":"/defi-wargame-2/"}},"previous":{"fields":{"slug":"/defi-wargame-4/"}}},{"node":{"id":"cab25208-c5af-55d1-9a24-d2f1bec3dba1","excerpt":"Wargame Provider: @tinchoabbate Challenge #2 — Naive receiver There’s a lending pool offering quite expensive flash loans of Ether, which has 1000 ETH in balance.\nYou also see that a user has deployed a contract with 10 ETH in balance, capable of interacting with the lending pool and receiveing flash loans of ETH.\nDrain all ETH funds from the user’s contract. Doing it in a single transaction is a big plus ;) Code Audit NaiveReceiverLenderPool.sol  Dependency We are using the Address contract of…","fields":{"slug":"/defi-wargame-2/"},"frontmatter":{"categories":"Blockchain","title":"Damn Vulnerable DeFi Wargame Challenge2 — Naive receiver Contract Analysis","date":"July 29, 2022"}},"next":{"fields":{"slug":"/defi-wargame-1/"}},"previous":{"fields":{"slug":"/defi-wargame-3/"}}},{"node":{"id":"290fa8aa-801e-5258-9c39-b020e9110881","excerpt":"Wargame Provider: @tinchoabbate Challenge #1 — Unstoppable There’s a lending pool with a million DVT tokens in balance, offering flash loans for free.\nIf only there was a way to attack and stop the pool from offering flash loans …\nYou start with 100 DVT tokens in balance. Code Audit UnstoppableLender.sol Quick Security Check By using the ReentrancyGuardcontract,  nonReentrant Modifier is applied to the internal functions of the main contract to prevent reentrancy calls from occurring. State Var…","fields":{"slug":"/defi-wargame-1/"},"frontmatter":{"categories":"Blockchain","title":"Damn Vulnerable DeFi Wargame Challenge1 — Unstoppable Contract Analysis😎","date":"July 20, 2022"}},"next":{"fields":{"slug":"/spatial-bypass-feature/"}},"previous":{"fields":{"slug":"/defi-wargame-2/"}}}]}},
    "staticQueryHashes": ["1073350324","1956554647","2938748437"]}