[Blackbox] Web3_Staking

caplag

Task: Exploit a DeFi staking pool with a deflationary ERC20 token. Solution: Leverage fee-on-transfer ledger drift where deposit records requested amount but receives less, allowing pool drain to zero.

blockchain erc20 web3 anvil defi staking fee_on_transfer deflationary_token accounting_bug

evm_bytecode_reverse_engineeringfee_on_transfer_ledger_driftdefi_accounting_exploitpool_drain

$ ls tags/ techniques/

blockchain erc20 web3 anvil defi staking fee_on_transfer deflationary_token accounting_bug

evm_bytecode_reverse_engineeringfee_on_transfer_ledger_driftdefi_accounting_exploitpool_drain

Analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

$ python3 exploit.py --target 192.168.1.1 --port 8080
[*] Connecting to target...
[+] Shell obtained!

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Permission denied (requires tier.pro)

Sign in to access full writeups

$sign in

$ grep --similar

Similar writeups

[blockchain][Pro][Blackbox] Web3_Lending— caplag
[blockchain][Pro][Blackbox] Web3_Bridge— caplag
[blockchain][Pro][Blackbox] Web3_VIP— caplag
[blockchain][Pro][Blackbox] Web3_Governance— caplag
[web][Pro]Lab 179 — VaultPay — Race Condition in Fund Transfer— hackadvisor