[Blackbox] Web3_Staking

caplag

A mini DeFi protocol stack (Bridge, VIP, Staking, Lending, Governance) is deployed on a local Anvil (Foundry) blockchain. The task is to find and exploit a vulnerability in the Staking component. The CLG token has a hidden 10% fee-on-transfer, and the StakingPool records requested amounts instead of

blockchain erc20 web3 anvil defi staking fee_on_transfer deflationary_token accounting_bug

fee_on_transfer_ledger_driftevm_bytecode_reverse_engineeringdefi_accounting_exploitpool_drain

$ ls tags/ techniques/

blockchain erc20 web3 anvil defi staking fee_on_transfer deflationary_token accounting_bug

fee_on_transfer_ledger_driftevm_bytecode_reverse_engineeringdefi_accounting_exploitpool_drain

Analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

$ python3 exploit.py --target 192.168.1.1 --port 8080
[*] Connecting to target...
[+] Shell obtained!

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Permission denied (requires tier.pro)

Sign in to access full writeups

$sign in

$ grep --similar

Similar writeups

[blockchain][Pro][Blackbox] Web3_Bridge— caplag
[blockchain][Pro][Blackbox] Web3_Lending— caplag
[blockchain][Pro][Blackbox] Web3_VIP— caplag
[blockchain][Pro][Blackbox] Web3_Governance— caplag
[blockchain][Pro]Second Stamp— CACTF2026