{"repo":"coinspect/learn-evm-attacks","free":true,"listed":false,"github":"https://github.com/coinspect/learn-evm-attacks","clone":"git clone https://github.com/coinspect/learn-evm-attacks.git","description":"🚀 Try the Learn EVM Explorer we just launched!!!","language":"Solidity","stars":1802,"topics":["audit","ethereum","ethereum-security","evm","security","smart-contracts","solidity-security"],"license":"MIT","category":"blockchain-web3","readme_excerpt":"Learn EVM Attacks A collection of Foundry tests reproducing exploits, bug bounty reports, and theoretical vulnerabilities on EVM chains. Diagrams and context links accompany each attack reproduction to make it more helpful as a reference or study material for anyone trying to learn more about vulnerabilities in smart contract systems. [!IMPORTANT] Some tests need access to archive data as they require state from old blocks. If a test is failing, make sure to set up an archive node as the JSON-RPC URL in foundry.toml . Infura provides free access to archive data. Want to take a quick look? Just go to a vulnerability folder (say, MBCToken). Read the README or jump ahead to running the reproduction in your computer! You only need Foundry installed. Index We now have 40 reproduced exploits. Of those 40, we have chosen a few in case you want to start studying up with some of the most interesting ones. - Tornado Cash Governance Takeover is an excellent way to show the dangers of DELEGATECALL and the perils of governance systems. - Furucombo another excellent way to show the dangers of DELEGATECALL . - MBC Token is a primer on how sandwich attacks can be made with an interesting backstory on suspicious tokenomics. - Uranium is a great excuse to study up on the actual code that guards the famouse AMM constant product x y=k . To run an specific exploit, you can just use: Vary the amount of verbosity ( -v , -vv ...) according to the data you want. -vvvv includes traces! The full list i","default_branch":null,"files":null,"tree":[],"storefront":"/r/coinspect","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/coinspect/learn-evm-attacks/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}