StErMi·Sep 3, 2023Aave v3 bug bounty part 3 — `LTV-0` `AToken` poison attack!Important Note: each of the issue I have found have been already fixed and deployed with the release of Aave 3.0.2A response icon1A response icon1
StErMi·Aug 31, 2023A fun on-chain investigation about PayPal `PYUSD` smart contractWhen PayPal announced the release of PyUSD on Ethereum, I was pretty excited and curious to see the codebase behind the stable coin.A response icon1A response icon1
StErMi·Aug 27, 2023Aave v3 bug bounty part 2: Aave liquidation process uses the wrong `debtPriceSource` if the user is…This article has been cross-posted from my personal website: https://stermi.xyz/blog/aave-bug-bounty-wrong-debtprice-in-liquidation-emodeA response icon1A response icon1
StErMi·Aug 20, 2023Aave v3 bug bounty part 1: Security concerns and improvements about the `executeFlashLoan` functionImportant Note: each of the issue I have found have been already fixed and deployed with the release of Aave 3.0.2
StErMi·Mar 1, 2023EKO2022 Enter the metaverse CTF Challenge 2 — Metaverse SupermarketThis is Part 2 of the series “Let’s play EKO2022 Enter the metaverse CTF”
StErMi·Feb 19, 2023EKO2022 Enter the metaverse CTF Challenge 1 — PhoenixttoThis is Part 1 of the series “Let’s play EKO2022 Enter the metaverse CTF”
StErMi·Jan 14, 2023Damn Vulnerable DeFi Challenge #12 Solution — ClimberDamn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.
StErMi·Jan 2, 2023Damn Vulnerable DeFi Challenge #11 Solution — BackdoorDamn Vulnerable DeFi is the war game created by @tinchoabbate to learn offensive security of DeFi smart contracts.
StErMi·Oct 6, 2022EthernautDAO CTF 9 Solution — EtherWalletΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers.
StErMi·Sep 27, 2022EthernautDAO CTF 8 Solution — Vulnerable NFTΞthernautDAO is common goods DAO aimed at transforming developers into Ethereum developers.