> For the complete documentation index, see [llms.txt](https://ret2basic.gitbook.io/ctfwriteup/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf.md).

# Web3 CTF

- [Web3 Security Notes](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/web3-security-notes.md)
- [Damn Vulnerable DeFi V4](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4.md)
- [Unstoppable](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/unstoppable.md)
- [Naive Receiver](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/naive-receiver.md)
- [Truster](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/truster.md)
- [Side Entrance](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/side-entrance.md)
- [The Rewarder](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/the-rewarder.md)
- [Selfie](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/selfie.md)
- [Compromised](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/compromised.md)
- [Puppet](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/puppet.md)
- [Puppet V2](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/puppet-v2.md)
- [Free Rider](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/free-rider.md)
- [Backdoor](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/backdoor.md)
- [Climber](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/climber.md)
- [Wallet Mining (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/wallet-mining-todo.md)
- [Puppet V3  (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/puppet-v3-todo.md)
- [ABI Smuggling (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/damn-vulnerable-defi-v4/abi-smuggling-todo.md)
- [Milotruck EVM Challs](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs.md)
- [1. Greyhats Dollar](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/1.-greyhats-dollar.md): self transfer double spend
- [2. Escrow](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/2.-escrow.md): ABI encoding asymmetry
- [3. Simple AMM Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/3.-simple-amm-vault.md)
- [4. Voting Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/4.-voting-vault.md)
- [5. Meta Staking](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/5.-meta-staking.md): ERC2771Context + Multicall bug
- [6. Gnosis Unsafe](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/6.-gnosis-unsafe.md): ecrecover address(0) bug + ABI-reencoding bug for solidity <0.8.16
- [7. Rational](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/7.-rational.md): rational-math ZERO representation
- [8. Launchpad](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/8.-launchpad.md)
- [9. Locker](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/9.-locker.md)
- [10. Race](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/milotruck-evm-challs/10.-race.md)
- [Remedy CTF 2025 (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo.md)
- [Diamond Heist](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/diamond-heist.md)
- [R vs Q](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/r-vs-q.md)
- [Rich Man's Bet](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/rich-mans-bet.md)
- [Casino Avengers](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/casino-avengers.md)
- [Frozen Voting](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/frozen-voting.md)
- [Lockdown](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/lockdown.md)
- [Proof of Thought](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/proof-of-thought.md)
- [Maybe it's unnecessary?](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/maybe-its-unnecessary.md)
- [Et tu, Permit2?](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/et-tu-permit2.md)
- [Not a very LUCKY TOKEN](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/not-a-very-lucky-token.md)
- [risc4](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/risc4.md)
- [HealthCheck as a Service](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/healthcheck-as-a-service.md)
- [Restricted Proxy](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/restricted-proxy.md)
- [Unstable Pool](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/unstable-pool.md)
- [Opaze Whisperer](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/opaze-whisperer.md)
- ["memorable" onlyOwner](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/memorable-onlyowner.md)
- [World of Memecraft](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/world-of-memecraft.md)
- [Copy/Paste/Deploy](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/copy-paste-deploy.md)
- [Peer-to-peer-to-me](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/peer-to-peer-to-me.md)
- [Joe's Lending Mirage](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/joes-lending-mirage.md)
- [Tokemak](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/tokemak.md)
- [OFAC Executive Order 13337](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/remedy-ctf-2025-todo/ofac-executive-order-13337.md)
- [Paradigm CTF 2023 (Todo)](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/paradigm-ctf-2023-todo.md)
- [Oven](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/paradigm-ctf-2023-todo/oven.md)
- [Dragon Tyrant](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/paradigm-ctf-2023-todo/dragon-tyrant.md)
- [Ethernaut](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut.md)
- [Hello Ethernaut](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/hello-ethernaut.md): intro
- [Fallback](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/fallback.md): fallback() and receive()
- [Fallout](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/fallout.md): backdoor
- [Coin Flip](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/coin-flip.md): randomness
- [Telephone](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/telephone.md): tx.origin
- [Token](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/token.md): overflow and underflow
- [Delegation](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/delegation.md): delegatecall
- [Force](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/force.md): selfdestruct
- [Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/vault.md): private state variable
- [King](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/king.md): king of the ether
- [Re-entrancy](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/re-entrancy.md): reentrancy attack
- [Elevator](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/elevator.md): calling other contract
- [Privacy](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/privacy.md): storage
- [Gatekeeper One](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/gatekeeper-one.md): gasleft()
- [Gatekeeper Two](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/gatekeeper-two.md): EOA check
- [Naught Coin](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/naught-coin.md): ERC20
- [Preservation](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/preservation.md): delegatecall and storage
- [Recovery](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/recovery.md): deterministic address
- [MagicNumber](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/magicnumber.md): EVM opcodes
- [Alien Codex](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/alien-codex.md): dynamic array
- [Denial](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/denial.md): DoS
- [Shop](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/shop.md): view functions
- [DEX](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/dex.md): integer division precision loss
- [DEX Two](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/dex-two.md): external ERC20 contract
- [Puzzle Wallet](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/puzzle-wallet.md): proxy contract
- [Motorbike](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/motorbike.md)
- [DoubleEntryPoint](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/doubleentrypoint.md)
- [Good Samaritan](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/good-samaritan.md): call chain
- [Gatekeeper Three](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/gatekeeper-three.md)
- [Switch](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/ethernaut/switch.md)
- [Flashbots MEV-Share CTF](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/flashbots-mev-share-ctf.md)
- [Capture the Ether](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/capture-the-ether.md)
- [Lotteries](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/capture-the-ether/lotteries.md)
- [Math](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/capture-the-ether/math.md)
- [Miscellaneous](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/capture-the-ether/miscellaneous.md)
- [EVM Puzzles](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles.md)
- [Puzzle 1](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-1.md): CALLVALUE, JUMP, JUMPDEST
- [Puzzle 2](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-2.md): CODESIZE, SUB
- [Puzzle 3](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-3.md): CALLDATASIZE
- [Puzzle 4](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-4.md): XOR
- [Puzzle 5](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-5.md): DUP, MUL, PUSH, EQ, JUMPI
- [Puzzle 6](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-6.md): CALLDATALOAD
- [Puzzle 7](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-7.md): CALLDATACOPY, CREATE
- [Puzzle 8](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-8.md): GAS, CALL
- [Puzzle 9](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-9.md)
- [Puzzle 10](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/evm-puzzles/puzzle-10.md)
- [More EVM Puzzles](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles.md)
- [Puzzle 1](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-1.md): PC
- [Puzzle 2](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-2.md): CALL, RETURNDATASIZE
- [Puzzle 3](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-3.md): DELEGATECALL
- [Puzzle 4](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-4.md): ADDRESS, BALANCE
- [Puzzle 5](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-5.md): MSIZE
- [Puzzle 6](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-6.md): overflow
- [Puzzle 7](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-7.md): gas cost
- [Puzzle 8](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-8.md)
- [Puzzle 9](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-9.md)
- [Puzzle 10](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/more-evm-puzzles/puzzle-10.md)
- [QuillCTF](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf.md)
- [MetaToken](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/metatoken.md)
- [Temporary Variable](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/temporary-variable.md)
- [KeyCraft](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/keycraft.md)
- [Lottery](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/lottery.md)
- [Private Club](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/private-club.md)
- [Voting Machine](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/voting-machine.md)
- [Predictable NFT](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/predictable-nft.md)
- [Invest Pool](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/invest-pool.md)
- [PseudoRandom](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/pseudorandom.md)
- [Gold NFT](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/gold-nft.md)
- [Slot Puzzle](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/slot-puzzle.md)
- [Moloch's Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/molochs-vault.md)
- [Donate](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/donate.md)
- [WETH-11](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/weth-11.md)
- [Panda Token](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/panda-token.md)
- [Gate](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/gate.md)
- [WETH10](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/weth10.md)
- [Pelusa](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/pelusa.md)
- [True XOR](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/true-xor.md)
- [Collatz Puzzle](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/collatz-puzzle.md)
- [D31eg4t3](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/d31eg4t3.md)
- [Safe NFT](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/safe-nft.md)
- [VIP Bank](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/vip-bank.md)
- [Confidential Hash](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/confidential-hash.md)
- [Road Closed](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/quillctf/road-closed.md)
- [unhacked](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/unhacked.md)
- [reaper](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/unhacked/reaper.md)
- [Secureum AMAZEX DSS Paris](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris.md)
- [Operation magic redemption](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/operation-magic-redemption.md)
- [Mission Modern WETH: Rescue the Ether](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/mission-modern-weth-rescue-the-ether.md)
- [LendEx pool hack](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/lendex-pool-hack.md)
- [Operation Rescue POSI Token!](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/operation-rescue-posi-token.md)
- [Balloon Vault](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/balloon-vault.md)
- [Safe Yield?](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/safe-yield.md)
- [Crystal DAO](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/crystal-dao.md)
- [Liquidatoooor](https://ret2basic.gitbook.io/ctfwriteup/web3-ctf/secureum-amazex-dss-paris/liquidatoooor.md)