Damn Vulnerable DeFi — Challenge #7 Walkthrough

Peter Kacherginsky
4 min readJan 24, 2021

Oracles play a critical role in many DeFi applications where they are used to correctly report asset prices and other data. As evident by many incidents such as Cheese Bank and Warp Finance, any oracle price manipulations can lead to multi-million losses. The next Damn Vulnerable DeFi challenge offers a plausible scenario where a price Oracle platform appears to leak potentially sensitive data:

While poking around a web service of one of the most popular DeFi projects in the space, you get a somewhat strange response from their server. This is a…

--

--

Peter Kacherginsky

Blockchain Security, Malware Analysis, Incident Response, Pentesting, BlockThreat.net