blockchain-security

Delegatecall storage manipulation occurs when a Solidity contract executes external code in its own context, writing to mismatched storage layouts and causing unintended variable overwrites. This Skill provides practical patterns and references to study these exploits safely in a sandboxed environment.

EVM CREATE address prediction involves calculating deterministic deployment addresses derived from deployer account nonces. This Skill demonstrates how nonce increments affect deployment addresses, enabling security researchers to predict and test address collision attacks.

Testing reentrancy and access control vulnerabilities requires identifying patterns where external calls hijack execution flow or permission checks are missing. This Skill offers detailed references and tooling guidance for identifying these common vulnerability classes in Solidity code.

Computing EVM storage slots involves deriving mapping storage locations and accessing private variables through deterministic slot calculation. This Skill provides storage layout analysis techniques to audit contracts and identify exposed private state data.

A sandboxed environment is required to safely test smart contract exploits like delegatecall manipulation and CREATE nonce prediction without risking live networks. This Skill is designed for security researchers performing vulnerability research and CTF challenges in isolated conditions.

Signature malleability vulnerabilities arise when EVM signature verification accepts multiple valid signatures for the same message, enabling replay attacks. This Skill helps identify malleability patterns alongside other access control flaws during security testing.