Đang tải bảng tin…
Coins Bench0 Hot0 bình luận3 phút đọc
Solving Damn Vulnerable DeFi V4: Level 4- Side Entrance
A walkthrough of the Side Entrance challenge from Damn Vulnerable DeFi V4, where the goal is to drain a lending pool. The vulnerability is a business logic flaw: the flash loan contract only checks that the pool balance is restored after the loan, but doesn't verify whether funds were returned via deposit (which credits the attacker's balance) rather than a direct transfer. The exploit takes a flash loan, repays it via the deposit function to gain an internal balance, then withdraws and sends funds to a recovery address. A working Solidity proof-of-concept contract and test function are provided.
Nguồn: https://coinsbench.com/solving-damn-vulnerable-defi-v4-level-4-side-entrance-21fa02a276ce. 8sync News chỉ tóm tắt và dẫn link; bản quyền nội dung thuộc tác giả và nguồn gốc.
Đề xuất cho bạn
Coins Bench0 Hot2 phút
Solving Damn Vulnerable DeFi V4: Level 3- Truster
A walkthrough of Level 3 (Truster) from Damn Vulnerable DeFi V4, a smart contract security challenge. The pool contains an arbitrary external call vulnerability in its flash loan function. By borrowing 0 ETH and passing crafted calldata that calls ERC20 approve(), an attacker can grant themselves allowance over the pool's entire token balance, then drain it via transferFrom() after the flash loan completes. Key takeaways: never allow arbitrary external calls in flash loan logic, always control who can supply calldata, and flash loans themselves are not inherently dangerous — the surrounding logic is.
