#damn-vulnerable-defi-v4 articles

Pavel EigensinnNov 15, 2025 · 10 min read

The One With a Side Entrance

What`s up! 🌐 Hello dear reader — and welcome to Side Episode of my journey through Damn Vulnerable DeFi.I’m Pavel, aka kode-n-rolla, your guide through the world of Web3 security and smart-contract hacking. This series documents not just the solutio...

kode-n-rolla.hashnode.dev

Pavel EigensinnSep 25, 2025 · 12 min read

The One With Too Much Trust

Hello, world! 🌐 👋 Welcome to the truster episode in Damn Vulnerable DeFi series. I’m your showrunner, Pavel aka kode-n-rolla. Independent security researcer. Check out the whole list of the Episodes 👇 The One With an Unstoppable Vault The One Wher...

kode-n-rolla.hashnode.dev

Pavel EigensinnSep 8, 2025 · 16 min read

The One Where Doing Nothing Costs Money

Whoami 🌐 I’m Pavel, aka kode-n-rolla — a security researcher. Welcome to Episode 2 of my Damn Vulnerable DeFi deep-dive series. In each episode, I break down one of the challenges from Damn Vulnerable DeFi, a hands-on security training ground for sm...

kode-n-rolla.hashnode.dev

whiteberets[.]ethOct 18, 2024 · 7 min read

Damn Vulnerable DeFi V4 - 10 Free Rider

Challenge A new marketplace of Damn Valuable NFTs has been released! There’s been an initial mint of 6 NFTs, which are available for sale in the marketplace. Each one at 15 ETH. A critical vulnerability has been reported, claiming that all tokens can...

goodhacker.hashnode.dev

whiteberets[.]ethOct 7, 2024 · 3 min read

Damn Vulnerable DeFi V4 - 09 Puppet V2

Challenge The developers of the previous pool seem to have learned the lesson. And released a new version. Now they’re using a Uniswap v2 exchange as a price oracle, along with the recommended utility libraries. Shouldn’t that be enough? You start wi...

goodhacker.hashnode.dev

whiteberets[.]ethOct 7, 2024 · 6 min read

Damn Vulnerable DeFi V4 - 08 Puppet

Challenge There’s a lending pool where users can borrow Damn Valuable Tokens (DVTs). To do so, they first need to deposit twice the borrowed amount in ETH as collateral. The pool currently has 100000 DVTs in liquidity. There’s a DVT market opened in ...

goodhacker.hashnode.dev

whiteberets[.]ethOct 1, 2024 · 7 min read

Damn Vulnerable DeFi V4 - 05 The Rewarder

Challenge A contract is distributing rewards of Damn Valuable Tokens and WETH. To claim rewards, users must prove they’re included in the chosen set of beneficiaries. Don’t worry about gas though. The contract has been optimized and allows claiming m...

goodhacker.hashnode.dev

whiteberets[.]ethOct 1, 2024 · 5 min read

Damn Vulnerable DeFi V4 - 07 Compromised

Challenge While poking around a web service of one of the most popular DeFi projects in the space, you get a strange response from the server. Here’s a snippet: HTTP/2 200 OK content-type: text/html content-language: en vary: Accept-Encoding server: ...

goodhacker.hashnode.dev

whiteberets[.]ethOct 1, 2024 · 4 min read

Damn Vulnerable DeFi V4 - 06 Selfie

Challenge A new lending pool has launched! It’s now offering flash loans of DVT tokens. It even includes a fancy governance mechanism to control it. What could go wrong, right ? You start with no DVT tokens in balance, and the pool has 1.5 million at...

goodhacker.hashnode.dev

whiteberets[.]ethSep 30, 2024 · 3 min read

Damn Vulnerable DeFi V4 - 04 Side Entrance

Challenge A surprisingly simple pool allows anyone to deposit ETH, and withdraw it at any point in time. It has 1000 ETH in balance already, and is offering free flashloans using the deposited ETH to promote their system. Yoy start with 1 ETH in bala...

goodhacker.hashnode.dev

Search Hashnode

Trending tags this week

The One With a Side Entrance

The One With Too Much Trust

The One Where Doing Nothing Costs Money

Damn Vulnerable DeFi V4 - 10 Free Rider

Damn Vulnerable DeFi V4 - 09 Puppet V2

Damn Vulnerable DeFi V4 - 08 Puppet

Damn Vulnerable DeFi V4 - 05 The Rewarder

Damn Vulnerable DeFi V4 - 07 Compromised

Damn Vulnerable DeFi V4 - 06 Selfie

Damn Vulnerable DeFi V4 - 04 Side Entrance