Skip to content

Releases: DefiAudit0x/evm-audit-lab

Release list

v0.2.0 — Ten Complete Security Labs

v0.2.0 — Ten Complete Security Labs Latest
Latest

Choose a tag to compare

View all tags
@DefiAudit0x DefiAudit0x released this 07 Sep 01:35
v0.2.0
e9aefb6

EVM Audit Lab v0.2.0

Ten complete, reproducible Solidity security labs — the lab index is
now fully delivered. Each lab pairs a vulnerable contract with its
remediated counterpart plus Foundry exploit and regression tests.

New in v0.2.0 (labs 08–10)

# Lab Vulnerability class
08 Signature Replay missing nonce/deadline/domain binding on signed payouts (SWC-121, SWC-117)
09 Privileged Mint unprotected supply creation on a 1:1 ETH-backed token (SWC-106)
10 Unchecked Return Value discarded bool from transfer / low-level call (SWC-104)

Highlights

  • 29/29 Foundry tests green, forge fmt --check enforced in CI.
  • Lab 08 covers replay, cross-contract reuse, expired deadlines and
    malleable high-s forgeries against an EIP-712 domain separator.
  • Lab 09 demonstrates a full reserve drain from a missing access check,
    with role-based minting + hard supply cap as the remediation.
  • Lab 10 reproduces the classic USDT-style silent failure: a phantom
    "paid" claim with tokens stuck in the router.
  • All ten labs follow the five-section method: threat model, violated
    invariant, minimal reproduction, remediation, regression test.

Verify locally

forge install
forge test -vv
Assets 2
Loading

v0.1.0 — Seven Complete Security Labs

v0.1.0 — Seven Complete Security Labs

Choose a tag to compare

View all tags
@DefiAudit0x DefiAudit0x released this 07 Sep 00:24
v0.1.0
66977a4

EVM Audit Lab v0.1.0

First tagged release: seven complete, reproducible Solidity security labs, each pairing a vulnerable contract with its remediated counterpart plus Foundry exploit and regression tests.

Labs

# Lab Vulnerability class
01 Reentrancy checks-effects-interactions violation
02 tx.origin Authorization misplaced authentication
03 Flash Loan Price Manipulation single-block oracle manipulation
04 Stale Oracle missing staleness / heartbeat check
05 Integer Precision Loss EIP-4626 first-depositor share inflation (rounding)
06 Sandwich / MEV Front-running mempool exploitation, missing slippage bound
07 Upgradeable Proxy Storage Collision hand-rolled proxy slots vs EIP-1967

Highlights

  • 15/15 Foundry tests green, forge fmt --check enforced in CI.
  • Every lab follows the five-section method: threat model, violated invariant, minimal reproduction, remediation, regression test.
  • Per-lab deep-dive write-ups under labs/ with attack diagrams, impact tables, and additional defenses.

Verify locally

forge install
forge test -vv
Loading