StErMiAave v3 bug bounty part 3 — `LTV-0` `AToken` poison attack!Important Note: each of the issue I have found have been already fixed and deployed with the release of Aave 3.0.28 min read·Sep 3, 2023----
StErMiA fun on-chain investigation about PayPal `PYUSD` smart contractWhen PayPal announced the release of PyUSD on Ethereum, I was pretty excited and curious to see the codebase behind the stable coin.14 min read·Aug 31, 2023--1--1
StErMiAave v3 bug bounty part 2: Aave liquidation process uses the wrong `debtPriceSource` if the user is…This article has been cross-posted from my personal website: https://stermi.xyz/blog/aave-bug-bounty-wrong-debtprice-in-liquidation-emode14 min read·Aug 27, 2023--1--1
StErMiAave v3 bug bounty part 1: Security concerns and improvements about the `executeFlashLoan` functionImportant Note: each of the issue I have found have been already fixed and deployed with the release of Aave 3.0.215 min read·Aug 20, 2023----
StErMiCoinbase CTF for ETHDenver 2023 — Riddle BountyRiddle Bounty is a CTF developed by @BuildOnBase for the ETH Denver 2023 conference.11 min read·Mar 6, 2023----
StErMiEKO2022 Enter the metaverse CTF Challenge 2 — Metaverse SupermarketThis is Part 2 of the series “Let’s play EKO2022 Enter the metaverse CTF”9 min read·Mar 1, 2023----
StErMiEKO2022 Enter the metaverse CTF Challenge 1 — PhoenixttoThis is Part 1 of the series “Let’s play EKO2022 Enter the metaverse CTF”10 min read·Feb 19, 2023----
StErMiDamn Vulnerable DeFi Challenge #12 Solution — ClimberDamn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.10 min read·Jan 14, 2023----
StErMiDamn Vulnerable DeFi Challenge #11 Solution — BackdoorDamn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.10 min read·Jan 2, 2023----
StErMiEthernautDAO CTF 9 Solution — EtherWalletΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers.6 min read·Oct 6, 2022----