# Web3 CTF - [Web3 Security Notes](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/web3-security-notes.md) - [Damn Vulnerable DeFi V4](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4.md) - [Unstoppable](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/unstoppable.md) - [Naive Receiver](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/naive-receiver.md) - [Truster](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/truster.md) - [Side Entrance](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/side-entrance.md) - [The Rewarder](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/the-rewarder.md) - [Selfie](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/selfie.md) - [Compromised](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/compromised.md) - [Puppet](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/puppet.md) - [Puppet V2](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/puppet-v2.md) - [Free Rider](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/free-rider.md) - [Backdoor](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/backdoor.md) - [Climber](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/climber.md) - [Wallet Mining (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/wallet-mining-todo.md) - [Puppet V3 (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/puppet-v3-todo.md) - [ABI Smuggling (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/abi-smuggling-todo.md) - [Milotruck EVM Challs](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs.md) - [1. Greyhats Dollar](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/1.-greyhats-dollar.md): self transfer double spend - [2. Escrow](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/2.-escrow.md): ABI encoding asymmetry - [3. Simple AMM Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/3.-simple-amm-vault.md) - [4. Voting Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/4.-voting-vault.md) - [5. Meta Staking](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/5.-meta-staking.md): ERC2771Context + Multicall bug - [6. Gnosis Unsafe](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/6.-gnosis-unsafe.md): ecrecover address(0) bug + ABI-reencoding bug for solidity <0.8.16 - [7. Rational](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/7.-rational.md): rational-math ZERO representation - [8. Launchpad](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/8.-launchpad.md) - [9. Locker](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/9.-locker.md) - [10. Race](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/10.-race.md) - [Remedy CTF 2025 (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo.md) - [Diamond Heist](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/diamond-heist.md) - [R vs Q](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/r-vs-q.md) - [Rich Man's Bet](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/rich-mans-bet.md) - [Casino Avengers](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/casino-avengers.md) - [Frozen Voting](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/frozen-voting.md) - [Lockdown](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/lockdown.md) - [Proof of Thought](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/proof-of-thought.md) - [Maybe it's unnecessary?](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/maybe-its-unnecessary.md) - [Et tu, Permit2?](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/et-tu-permit2.md) - [Not a very LUCKY TOKEN](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/not-a-very-lucky-token.md) - [risc4](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/risc4.md) - [HealthCheck as a Service](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/healthcheck-as-a-service.md) - [Restricted Proxy](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/restricted-proxy.md) - [Unstable Pool](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/unstable-pool.md) - [Opaze Whisperer](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/opaze-whisperer.md) - ["memorable" onlyOwner](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/memorable-onlyowner.md) - [World of Memecraft](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/world-of-memecraft.md) - [Copy/Paste/Deploy](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/copy-paste-deploy.md) - [Peer-to-peer-to-me](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/peer-to-peer-to-me.md) - [Joe's Lending Mirage](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/joes-lending-mirage.md) - [Tokemak](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/tokemak.md) - [OFAC Executive Order 13337](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/ofac-executive-order-13337.md) - [Paradigm CTF 2023 (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/paradigm-ctf-2023-todo.md) - [Oven](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/paradigm-ctf-2023-todo/oven.md) - [Dragon Tyrant](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/paradigm-ctf-2023-todo/dragon-tyrant.md) - [Ethernaut](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut.md) - [Hello Ethernaut](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/hello-ethernaut.md): intro - [Fallback](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/fallback.md): fallback() and receive() - [Fallout](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/fallout.md): backdoor - [Coin Flip](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/coin-flip.md): randomness - [Telephone](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/telephone.md): tx.origin - [Token](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/token.md): overflow and underflow - [Delegation](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/delegation.md): delegatecall - [Force](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/force.md): selfdestruct - [Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/vault.md): private state variable - [King](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/king.md): king of the ether - [Re-entrancy](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/re-entrancy.md): reentrancy attack - [Elevator](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/elevator.md): calling other contract - [Privacy](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/privacy.md): storage - [Gatekeeper One](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/gatekeeper-one.md): gasleft() - [Gatekeeper Two](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/gatekeeper-two.md): EOA check - [Naught Coin](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/naught-coin.md): ERC20 - [Preservation](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/preservation.md): delegatecall and storage - [Recovery](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/recovery.md): deterministic address - [MagicNumber](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/magicnumber.md): EVM opcodes - [Alien Codex](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/alien-codex.md): dynamic array - [Denial](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/denial.md): DoS - [Shop](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/shop.md): view functions - [DEX](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/dex.md): integer division precision loss - [DEX Two](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/dex-two.md): external ERC20 contract - [Puzzle Wallet](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/puzzle-wallet.md): proxy contract - [Motorbike](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/motorbike.md) - [DoubleEntryPoint](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/doubleentrypoint.md) - [Good Samaritan](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/good-samaritan.md): call chain - [Gatekeeper Three](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/gatekeeper-three.md) - [Switch](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/switch.md) - [Flashbots MEV-Share CTF](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/flashbots-mev-share-ctf.md) - [Capture the Ether](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/capture-the-ether.md) - [Lotteries](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/capture-the-ether/lotteries.md) - [Math](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/capture-the-ether/math.md) - [Miscellaneous](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/capture-the-ether/miscellaneous.md) - [EVM Puzzles](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles.md) - [Puzzle 1](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-1.md): CALLVALUE, JUMP, JUMPDEST - [Puzzle 2](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-2.md): CODESIZE, SUB - [Puzzle 3](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-3.md): CALLDATASIZE - [Puzzle 4](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-4.md): XOR - [Puzzle 5](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-5.md): DUP, MUL, PUSH, EQ, JUMPI - [Puzzle 6](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-6.md): CALLDATALOAD - [Puzzle 7](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-7.md): CALLDATACOPY, CREATE - [Puzzle 8](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-8.md): GAS, CALL - [Puzzle 9](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-9.md) - [Puzzle 10](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-10.md) - [More EVM Puzzles](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles.md) - [Puzzle 1](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-1.md): PC - [Puzzle 2](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-2.md): CALL, RETURNDATASIZE - [Puzzle 3](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-3.md): DELEGATECALL - [Puzzle 4](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-4.md): ADDRESS, BALANCE - [Puzzle 5](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-5.md): MSIZE - [Puzzle 6](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-6.md): overflow - [Puzzle 7](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-7.md): gas cost - [Puzzle 8](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-8.md) - [Puzzle 9](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-9.md) - [Puzzle 10](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-10.md) - [QuillCTF](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf.md) - [MetaToken](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/metatoken.md) - [Temporary Variable](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/temporary-variable.md) - [KeyCraft](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/keycraft.md) - [Lottery](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/lottery.md) - [Private Club](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/private-club.md) - [Voting Machine](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/voting-machine.md) - [Predictable NFT](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/predictable-nft.md) - [Invest Pool](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/invest-pool.md) - [PseudoRandom](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/pseudorandom.md) - [Gold NFT](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/gold-nft.md) - [Slot Puzzle](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/slot-puzzle.md) - [Moloch's Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/molochs-vault.md) - [Donate](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/donate.md) - [WETH-11](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/weth-11.md) - [Panda Token](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/panda-token.md) - [Gate](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/gate.md) - [WETH10](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/weth10.md) - [Pelusa](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/pelusa.md) - [True XOR](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/true-xor.md) - [Collatz Puzzle](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/collatz-puzzle.md) - [D31eg4t3](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/d31eg4t3.md) - [Safe NFT](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/safe-nft.md) - [VIP Bank](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/vip-bank.md) - [Confidential Hash](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/confidential-hash.md) - [Road Closed](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/road-closed.md) - [unhacked](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/unhacked.md) - [reaper](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/unhacked/reaper.md) - [Secureum AMAZEX DSS Paris](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris.md) - [Operation magic redemption](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/operation-magic-redemption.md) - [Mission Modern WETH: Rescue the Ether](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/mission-modern-weth-rescue-the-ether.md) - [LendEx pool hack](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/lendex-pool-hack.md) - [Operation Rescue POSI Token!](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/operation-rescue-posi-token.md) - [Balloon Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/balloon-vault.md) - [Safe Yield?](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/safe-yield.md) - [Crystal DAO](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/crystal-dao.md) - [Liquidatoooor](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/liquidatoooor.md) --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://ret2basic.gitbook.io/ctfwriteup/web3-ctf.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.