Challenge Overview
Ethernaut is a Web3/Solidity based wargame inspired by overthewire.org, played in the Ethereum Virtual Machine. Each level is a smart contract that needs to be 'hacked'. The game acts both as a tool for those interested in learning Ethereum and as a way to catalogue historical hacks as levels.
What You'll Learn
- Smart contract vulnerabilities
- Web3 security principles
- Solidity pitfalls
- Real-world attack vectors
Prerequisites
- Intermediate Solidity knowledge
- Understanding of EVM
- MetaMask wallet setup
- Basic JavaScript skills
Tools Used
- Remix IDE
- Web3.js / Ethers.js
- Hardhat / Foundry
- MetaMask
Ethernaut Challenges
Fallback
Learn about function fallbacks and how to exploit them to take ownership of a contract.
Fallout
Exploit a constructor naming vulnerability to claim ownership of the contract.
Coin Flip
Predict the outcome of a coin flip to exploit randomness vulnerabilities in Solidity.
Telephone
Learn the difference between tx.origin and msg.sender to claim ownership of a contract.
Token
Exploit integer underflow vulnerability to gain unlimited tokens.
Delegation
Use delegatecall to take ownership of a contract through function delegation.
Force
Force ETH into a contract that has no payable functions or fallback function.
Vault
Understand storage visibility and unlock a vault by accessing private data.
King
Break a smart contract game by preventing others from becoming the king through a clever denial of service attack.
Re-entrancy
Exploit a classic re-entrancy vulnerability to drain all funds from a contract before its balance is updated.
Elevator
Manipulate a building's interface implementation to make an elevator reach the top floor of a building.
Privacy
Unlock a contract by understanding how storage works in Ethereum and accessing seemingly private data.
Gatekeeper One
Unlock a contract by understanding how storage works in Ethereum and accessing seemingly private data.
Naught Coin
Unlock a contract by understanding how storage works in Ethereum and accessing seemingly private data.
Preservation
Unlock a contract by understanding how storage works in Ethereum and accessing seemingly private data.
Recovery
Unlock a contract by understanding how storage works in Ethereum and accessing seemingly private data.
Magic Number
Unlock a contract by understanding how storage works in Ethereum and accessing seemingly private data.
Alien Code X
Unlock a contract by understanding how storage works in Ethereum and accessing seemingly private data.
Denial
Unlock a contract by understanding how storage works in Ethereum and accessing seemingly private data.
shop
Unlock a contract by understanding how storage works in Ethereum and accessing seemingly private data.
puzzle wallet
Unlock a contract by understanding how storage works in Ethereum and accessing seemingly private data.