Solidity

The EVM Hack Registry is a comprehensive archive of hundreds of DeFi/EVM exploit proof-of-concepts (PoCs) designed for offline execution across multiple blockchain networks from 2017 to 2026. Each exploit is encapsulated within a standalone Foundry project, complete with on-chain contract source code, a local block-state snapshot, and detailed AI-generated documentation, enabling reproducibility without reliance on external RPC nodes. This tool aims to simplify the study and analysis of blockchain vulnerabilities, addressing common accessibility issues found in existing DeFi hack resources.

The malleable-signatures repository provides a proof of concept (PoC) that demonstrates signature malleability attacks using compact signatures within the Ethereum ecosystem. It highlights vulnerabilities in OpenZeppelin’s ECDSA library version 4.6 that are exploitable through signature malleability, emphasizing the necessity to avoid using signatures as unique identifiers due to their inherent non-uniqueness. Key features include showcasing the vulnerability and its remediation in later library versions, along with a detailed explanation of the underlying cryptographic principles involved.