Repository files navigation

Reproduce DeFi hack incidents using Foundry.

681 incidents included.

Let's make Web3 secure! JoinDiscord

Notion:101 root cause analysis of past DeFi hacked incidents

Transaction debugging tools

Disclaimer: This content serves solely as a proof of concept showcasing past DeFi hacking incidents. It is strictly intended for educational purposes and should not be interpreted as encouraging or endorsing any form of illegal activities or actual hacking attempts. The provided information is for informational and learning purposes only, and any actions taken based on this content are solely the responsibility of the individual. The usage of this information should adhere to applicable laws, regulations, and ethical standards.

• Getting Started
• Who Support Us
• Donate Us
• List of Past DeFi Incidents
• Transaction debugging tools
• Ethereum Signature Database
• Useful tools
• Hacks Dashboard
• List of DeFi Hacks & POCs

• Follow theinstructions to installFoundry.

• Clone and install dependencies:git submodule update --init --recursive

• Contributing Guidelines

All articles are also published onSubstack.

• Lesson 1: Tools (English |中文 |Vietnamese |Korean |Spanish |日本語 )
• Lesson 2: Warm up (English |中文 |Korean |Spanish |日本語 )
• Lesson 3: Write Your Own PoC (Price Oracle Manipulation) (English |中文 |Korean |Spanish |日本語 )
• Lesson 4: Write Your Own PoC (MEV Bot) (English |中文 |Korean |Spanish |日本語 )
• Lesson 5: Rugpull Analysis (English |中文 |Spanish |日本語 )
• Lesson 6: Write Your Own PoC (Reentrancy) (English |中文 |Spanish |日本語 )
• Lesson 7: Hack Analysis: Nomad Bridge, August 2022 (English |中文 |Spanish |日本語 )

If you appreciate our work, please consider donating. Even a small amount helps us continue developing and improving our projects, and promoting web3 security.

• Gitcoin -Donate DeFiHackLabs
• EVM Chains - 0xD7d6215b4EF4b9B5f40baea48F41047Eb67a11D5
• Giveth

20260120 Makina

20260120 SynapLogic

20260112 MTToken

20260110 FutureSwap

20260109 TRU

20260101 PRXVT

Phalcon |Tx tracer |Cruise |Ethtx |Tenderly |eigenphi

4byte |sig db |etherface

ABI to interface |Get ABI for unverified contracts |ETH Calldata Decoder |ETHCMD - Guess ABI |Abi tools

Slowmist |Defillama |De.Fi |Rekt |Cryptosec |BlockSec

NOTICE: SynapLogic is totally a cheat contract, with backdoors, vulnerabilities and rug pulls.

forgetest -vvv --contracts ./src/test/2026-01/SynapLogic_exp.sol

SynapLogic_exp.sol

https://x.com/TenArmorAlert/status/2013432861366292520?s=20

https://x.com/hklst4r/status/2013440353844461979?s=20

https://x.com/CertiKAlert/status/2013440963851755610?s=20

https://x.com/nn0b0dyyy/status/2013445844394279260?s=20

forgetest -vvv --contracts ./src/test/2026-01/makina_exp.sol --evm-version cancun# MUST use evm >= cancun

makina_exp.sol

https://x.com/nn0b0dyyy/status/2013472538832314630

https://x.com/TenArmorAlert/status/2013460083078836342

https://x.com/CertiKAlert/status/2013473512116363734

forgetest -vvv --contracts ./src/test/2026-01/MTToken_exp.sol

MTToken_exp.sol

https://x.com/TenArmorAlert/status/2010630024274010460?s=20

https://x.com/nn0b0dyyy/status/2010638145155661942?s=20

forgetest -vvv --contracts ./src/test/2026-01/futureswap_exp.sol.sol

futureswap_exp.sol

https://x.com/nn0b0dyyy/status/2009922304927731717?s=20

forgetest --contracts ./src/test/2026-01/Truebit_exp.sol -vvv

Truebit_exp.sol

https://www.certik.com/zh-CN/resources/blog/truebit-incident-analysis

forgetest --contracts ./src/test/2026-01/PRXVT_exp.sol -vvv --block-gas-limit 60000000# use gas limit control iterations

PRXVT_exp.sol

https://x.com/CertiKAlert/status/2006685174587605315

Foundry also has the ability toreport thegas used per function call which mimics the behavior ofhardhat-gas-reporter. Generally speaking if gas costs per function call is very high, then the likelihood of its success is reduced. Gas optimization is an important activity done by smart contract developers.

Every poc in this repository can produce a gas report like this:

forgetest --gas-report --contracts<contract> -vvv

For Example:Let us find out the gas used in theAudius poc

Execution

forgetest --gas-report --contracts ./src/test/Audius.exp.sol -vvv

Demo

Moved toDeFiVulnLabs

Moved toDeFiLabs