Damn Vulnerable DeFi

Welcome to Damn Vulnerable DeFi. The training ground for security researchers, developers and educators to dive into smart contract security.

Are you ready to save the most vulnerable contracts ever coded?

Explore challenges featuring flashloans, price oracles, governance, NFTs, DEXs, lending pools, smart contract wallets, timelocks, vaults, meta-transactions, token distributions, upgradeability, and more!

Challenges

#Name
1Unstoppable
2Naive receiver
3Truster
4Side Entrance
5The Rewarder
6Selfie
7Compromised
8Puppet
9Puppet V2
10Free Rider
11Backdoor
12Climber
13Wallet Mining
14Puppet V3
15ABI Smuggling
16Shards
17Curvy Puppet
18Withdrawal

How to play

Find all instructions to install, play, troubleshoot and other rules in the repository.

Testimonials

"LGTM"

-- cryptotwitter security guru & influencer

"In my days I'd have gone all-in into these bad boys"

-- retired DeFi degen

"Catchy name! Got ROI projections on these pools? I'm game for seed round"

-- SF crypto investor

"I've seen worse in prod"

-- OG solidity auditor