Skip to content

v0.1.0 — Seven Complete Security Labs

Choose a tag to compare

@DefiAudit0x DefiAudit0x released this 07 Sep 00:24
· 8 commits to main since this release

EVM Audit Lab v0.1.0

First tagged release: seven complete, reproducible Solidity security labs, each pairing a vulnerable contract with its remediated counterpart plus Foundry exploit and regression tests.

Labs

# Lab Vulnerability class
01 Reentrancy checks-effects-interactions violation
02 tx.origin Authorization misplaced authentication
03 Flash Loan Price Manipulation single-block oracle manipulation
04 Stale Oracle missing staleness / heartbeat check
05 Integer Precision Loss EIP-4626 first-depositor share inflation (rounding)
06 Sandwich / MEV Front-running mempool exploitation, missing slippage bound
07 Upgradeable Proxy Storage Collision hand-rolled proxy slots vs EIP-1967

Highlights

  • 15/15 Foundry tests green, forge fmt --check enforced in CI.
  • Every lab follows the five-section method: threat model, violated invariant, minimal reproduction, remediation, regression test.
  • Per-lab deep-dive write-ups under labs/ with attack diagrams, impact tables, and additional defenses.

Verify locally

forge install
forge test -vv