[Damn Vulnerable DeFi] Free Rider
문제 Free Rider A new marketplace of Damn Valuable NFTs has been released! There’s been an initial mint of 6 NFTs, which are available for sale in the marketplace. Each one at 15 ETH. The developers behind it have been notified the marketplace is vulnerable. All tokens www.damnvulnerabledefi.xyz 취약점 msg.value의 잘못된 사용 FreeRiderNFTMarketplace 컨트랙트의 취약점은 buyMany 함수에서 호출된 _buyOne 함수에서 msg.value를 그대로 사..
[Damn Vulnerable DeFi] Puppet V2
문제 Puppet V2 The developers of the previous pool seem to have learned the lesson. And released a new version! Now they’re using a Uniswap v2 exchange as a price oracle, along with the recommended utility libraries. That should be enough. You start with 20 ETH and 100 www.damnvulnerabledefi.xyz 취약점 이전 문제의 취약점은 UniswapV1의 즉각적인 가격 반영으로 인한 오라클 가격 조작이었습니다. 그래서 이번에는 UniswapV2를 사용한 새로운 버전을 사용했군요! 그리고 이..