Repository navigation
v0.1.0 — Seven Complete Security Labs
EVM Audit Lab v0.1.0
First tagged release: seven complete, reproducible Solidity security labs, each pairing a vulnerable contract with its remediated counterpart plus Foundry exploit and regression tests.
Labs
| # | Lab | Vulnerability class |
|---|---|---|
| 01 | Reentrancy | checks-effects-interactions violation |
| 02 | tx.origin Authorization | misplaced authentication |
| 03 | Flash Loan Price Manipulation | single-block oracle manipulation |
| 04 | Stale Oracle | missing staleness / heartbeat check |
| 05 | Integer Precision Loss | EIP-4626 first-depositor share inflation (rounding) |
| 06 | Sandwich / MEV Front-running | mempool exploitation, missing slippage bound |
| 07 | Upgradeable Proxy Storage Collision | hand-rolled proxy slots vs EIP-1967 |
Highlights
- 15/15 Foundry tests green,
forge fmt --checkenforced in CI. - Every lab follows the five-section method: threat model, violated invariant, minimal reproduction, remediation, regression test.
- Per-lab deep-dive write-ups under
labs/with attack diagrams, impact tables, and additional defenses.
Verify locally
forge install
forge test -vv