Mr Steal Yo Crypto

The offensive security playground for exploiting smart contracts

< Back to challenges

Challenge 20 - Safu Lender

[SETTING]: Following the exploit of Safu Labs’ vault, wallet & AMM products - at Safu Labs HQ.

[Mr Big Balls Boss]: Fuck Chad we gotta make sure our new lending product doesn’t get exploited. I got into crypto to rake in cash, not to write post-mortems and get flamed on twitter.

[Mega Chad Dev]: Don’t worry bossman we got a [redacted] audit this time, they even hooked us up with a 50% off voucher.

[FIN]: You drain all the funds (99%+ wBTC), starting with no tokens.