0xjarix

0xjarix

WazirX Hack Analysis

WazirX Hack Analysis

Overview On July 18th, 2024, WazirX, India's leading cryptocurrency exchange fell victim to a ~$230 Million attack. One of their self-custodial safe multi-sig wallets was compromised and drained. Main addresses and transactions * Attacker’s Address: 0x6eedf * Related Address Chain (Stolen fund is in these addresses): 0x04b21, 0x35feb, 0x90ca7,

Ethernaut: Naught Coin

Ethernaut: Naught Coin

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Gatekeeper Two

Ethernaut: Gatekeeper Two

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Gatekeeper One

Ethernaut: Gatekeeper One

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Privacy

Ethernaut: Privacy

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Elevator

Ethernaut: Elevator

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Re-etrancy

Ethernaut: Re-etrancy

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: King

Ethernaut: King

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Vault

Ethernaut: Vault

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Force

Ethernaut: Force

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Delegation

Ethernaut: Delegation

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Token

Ethernaut: Token

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Telephone

Ethernaut: Telephone

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Coin Flip

Ethernaut: Coin Flip

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Fallout

Ethernaut: Fallout

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Fallback

Ethernaut: Fallback

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

Ethernaut: Hello Ethernaut

Ethernaut: Hello Ethernaut

My take on CTFs CTFs constitute a crucial part in the process of becoming a successful security researcher as they require from you an eye for details, a good understanding of solidity and great technical skills to perform the attack and capture the flag. The most talented security researchers are

If I had to start again

If I had to start again

This is a roadmap I would follow if I had to start my journey as a security research from scratch today with 0$ and no prior experience in blockchain or tech whatsoever: * If you're new in the tech field I would advise to take this course: https://pll.

Audit checklist

Audit checklist

* understanding the project as a whole (docs + code) * doc/code discrepancy (compare them carefully) * read previous reports (devs commit the same vulnerabilities even though it’s a different codebase, learnt it the hard way when decided against participating in midas second contest: https://github.com/sherlock-audit/2024-08-midas-minter-redeemer-judging/issues and https:

Who's Calling?

As you know there are two types of accounts in ethereum, externally owned accounts(EOA) and contracts. There is absolutely no way of knowing if an address is that of an EOA or that of a contract just by looking at the 20-bytes address. Sometimes, we want the address making