Intro O3 is a multi-service DeFi project with bridging solutions that supports 10+ chains. In each chain there are several contracts...

Intro Tokemak operates a liquidity farming strategy. The funds are held by Tokemak manager contract (here). For maintenance operations,...

Yesterday I was taking a look at oasisDEX, a trading dApp from the MakerDAO team. With a 10-100K crit bounty on Immunefi and a team with...

Description Bug Description The harvester's harvest() function exchanges reward tokens to USDC. There is a bug in the following lines: if...

Bug Description To pull funds from trade executors, in order to satisfy user withdrawls, initiateWithdraw() function is used. For Convex...

Target https://optimistic.etherscan.io/address/0x1b6BF7Ab4163f9a7C1D4eCB36299525048083B5e Description Bug Description In...

Target https://etherscan.io/address/0x3c4Fe0db16c9b521480c43856ba3196A9fa50E08 Bug Description According to the docs (linked below) and...

Target https://bscscan.com/address/0x66BEA595AEFD5a65799a920974b377Ed20071118 Bug Description The distributeRewards() which pays out...

Target https://etherscan.io/address/0x00e5c0774A5F065c285068170b20393925C84BF3 Bug Description One of the core invariants of the...

Target https://etherscan.io/address/0x7e8844ea4c211a69ad9308ba0b6cdb3ea0bb2b05 Bug Description In seizeInternal(),...

ANKR and Stader for BNB are both liquid staking solutions for BSC. They are both vulnerable to the expoit detailed below. They have...

Target https://github.com/compound-finance/compound-protocol/pull/127 Bug Description When borrower's liquidation becomes negative,...

Title: PositionsManager implementation contract state could be corrupted and possibly destructed. Target: https://etherscan.io/address/0x...

Web3 has secured its place as home of scammers, with a constant supply of new schemes and rotation of old ones. Today we’ll take a look...

Target https://wallet.polygon.technology Bug Description When using the https://wallet.polygon.technology/token-swap endpoint, the user...

Today we will be reversing a serial number validator written in EXCEL logic. First steps We receive an XLSX file and opening it in EXCEL...

The challenge is an HTML file called index.html, which contains obfuscated and minified Javascript. When browsing the page we receive 34...

Communication in the future is a big thing. With the rising amount of data in the internet new handshake techniques are required. Here is...

This deceptively simple challenge proved a great exercise in abusing FILE structs. Literally gifting you the entire libc of the process,...

Description: There is no description for the challenge. The zip file includes three resources: challenge.txt – gives us the encryption...