What is this?
This Decentralized Application (DApp) is a series of vulnerable smart contracts with real-life use cases, ranging from decentralized trust funds and open source lottery systems, to ICOs and automated royalty agreements.
Each of these applications contain a vulnerability commonly found in smart contracts. Participants can practice exploiting these bugs to steal fake testnet ETH.
The challenges contain 6 of the most common vulnerabilities found in Ethereum smart contracts today, including reentrancy, integer overflows/underflows, predictable randomness, and more!
Solve all of our 7 challenges by stealing the balance of vulnerable smart contracts. Once you have stolen the funds, the amount will be logged in points to our leaderboard.
Decentralized App
In the spirit of decentralization, we have developed the platform as a client-side DApp with our smart contracts running on the Ethereum Testnet Blockchain. This means that there is no back-end server components aside from a few statically hosted scripts. All state is managed by the permission-less, decentralized network running the Ropsten Testnet Blockchain.
How to Get Started
In order to view this DApp, you must have the Metamask browser extension installed.
We also recommend using the Brave web browser since in our experience it seems to work best with Metamask.
Once it is installed, unlock Metamask and configure it to point to the Ropsten Testnet Blockchain.
Once that is done, your browser will be refreshed automatically.
Interested in More Challenges?
At Security Innovation we specialize in providing realistic enviornments for you to practice modern hacking techniques and exploits.
Check out our CMD+CTRL offerings for realistic simulations of vulnerable web, mobile, and network environments.
Learn more about Security Innovation and our product offerings by visiting https://securityinnovation.com
or contact us at [email protected]
https://blockchain-ctf.securityinnovation.com/#/
Created by
https://twitter.com/MickAyzenberg