blockchaineasy

Distract and Destroy

hackthebox

Task: Smart contract creature with 1000 HP that requires specific conditions to damage. Solution: Exploit tx.origin vs msg.sender difference by setting aggro directly, then attacking through an intermediary contract to bypass the _isOffBalance() check.

$ ls tags/ techniques/
blockchainsoliditysmart-contracttx-origin
tx_origin_bypasscontract_call
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]