Exploitsâ
1nf0s3cpt has created an awesome repo of reproducable exploits that includes 124 incidents. This PoCs are made with Foundry.
You can access them here:
Getting Startedâ
Follow the instructions to install Foundry.
Clone and install dependencies:
git submodule update --init --recursive
List of DeFi Hacks & Exploitsâ
2022â
Quixotic - Optimism NFT Marketplace
2021â
2020â
2018â
2017â
20171106 Parity - 'Accidentally Killed It'
Transaction debugging toolsâ
Phalcon | Tx.viewer | Cruise |Ethtx | Tenderly
Ethereum Signature Databaseâ
Useful toolsâ
ABI to interface | Get ABI for unverified contracts | ETH Calldata Decoder
Hacks Dashboardâ
Slowmist | Defillama | Defiyield | Rekt | Cryptosec
Link referenceâ
https://elementus.io/blog/which-icos-are-affected-by-the-parity-wallet-bug/
https://etherscan.io/tx/0x05f71e1b2cb4f03e547739db15d080fd30c989eda04d37ce6264c5686e0722c9
https://etherscan.io/tx/0x47f7cff7a5e671884629c93b368cb18f58a993f4b19c2a53a8662e3f1482f690
View Gas Reportsâ
Foundry also has the ability to report the gas used per function call which mimics the behavior of hardhat-gas-reporter. Generally speaking if gas costs per function call is very high, then the likelihood of its success is reduced. Gas optimization is an important activity done by smart contract developers.
Every poc in this repository can produce a gas report like this:
forge test --gas-report --contracts <contract> -vvv
For Example: Let us find out the gas used in the Audius poc
Execution
forge test --gas-report --contracts ./src/test/Audius.exp.sol -vvv
Demo
Bug Reproduceâ
FlashLoan Testingâ
Solana PoC Frameworkâ
Neodyme Labs has made a framework for creating PoC's for Solana Smart Contracts.
You can access it here: