When PayPal announced the release of PyUSD on Ethereum, I was pretty excited and curious to see the codebase behind the stable coin. I had plenty of questions on my mind that needed an answer: 1) Was the code written from scratch? 2) Was it secure and optimized? 3) Has…

This article has been cross-posted from my personal website: https://stermi.xyz/blog/aave-bug-bounty-wrong-debtprice-in-liquidation-emode — Important Note: each of the issue I have found have been already fixed and deployed with the release of Aave 3.0.2 On May 15th 2023, Aave have officially released a post on their Governance forum to disclose different bug…

Important Note: each of the issue I have found have been already fixed and deployed with the release of Aave 3.0.2 On May 15th 2023, Aave have officially released a post on their Governance forum to disclose different bug bounty submissions. …

Riddle Bounty is a CTF developed by @BuildOnBase for the ETH Denver 2023 conference. Base is a new Ethereum L2, incubated by Coinbase and built on the open-source OP Stack. We have no plans to issue a new network token. The CTF is composed of three little riddle games, where…

This is Part 2 of the series “Let’s play EKO2022 Enter the metaverse CTF” EKO2022 Enter the metaverse is a collection of challenges made for the EKOparty 2022 submitted by some gigabrain hackers; @Br0niclΞ, @nicobevi.eth, @matta, @tinchoabbate, @adriro, @bengalaQ, @chiin, @Rotciv, @Bahurum and @0x4non. This is a simple experiment of…

This is Part 1 of the series “Let’s play EKO2022 Enter the metaverse CTF” EKO2022 Enter the metaverse is a collection of challenges made for the EKOparty 2022 submitted by some gigabrain hackers; @Br0niclΞ, @nicobevi.eth, @matta, @tinchoabbate, @adriro, @bengalaQ, @chiin, @Rotciv, @Bahurum and @0x4non. This is a simple experiment of…

Damn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts. Throughout numerous challenges, you will build the skills to become a bug hunter or security auditor in the space. Challenge #12 — Climber There’s a secure vault contract guarding 10 million DVT tokens. …

Damn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts. Throughout numerous challenges, you will build the skills to become a bug hunter or security auditor in the space. Challenge #11 — Backdoor To incentivize the creation of more secure wallets in their team, someone has…

ΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers. They started releasing CTF challenges on Twitter, so how couldn’t I start solving them? CTF 9: EtherWallet The challenge start from this Tweet: In this challenge, we need to exploit an ERC721 token called EtherWallet. …