Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[⭐] Coding challenges for web3 challenges #2091

Open
1 of 2 tasks
bkimminich opened this issue Sep 10, 2023 · 9 comments
Open
1 of 2 tasks

[⭐] Coding challenges for web3 challenges #2091

bkimminich opened this issue Sep 10, 2023 · 9 comments

Comments

@bkimminich
Copy link
Member

bkimminich commented Sep 10, 2023

Those web3 hacking challenges that originate from a security flaw in their smart contract implementation, should receive a corresponding coding challenge. This requires:

  • Adding the original smart contracts to the codebase so they can be parsed as code snippets (for "Find It" phase)
  • Adding 3-4 possible fix options each (for "Fix It" phase)

Adding the original smart contracts might best be done by auto-copying them over from https://github.com/juice-shop/web3-contracts/tree/dev/contracts every time they change there, and also have the vuln-marker comments over there so we do not end with redundant maintenance.

@bkimminich
Copy link
Member Author

bkimminich commented Sep 10, 2023

Added copy job https://github.com/juice-shop/web3-contracts/actions/workflows/update-contract-snippets.yml that currently fails due to tokens of @JuiceShopBot not working or wrongly configured works fine!

Copies are available and already contain markers for the vulnerable, neutral and to-hide lines of code. The lines were selected based on my understanding, so they might be off by quite a bit - @rishabhkeshan, could you take a look if these are the right lines and if not change the markers in https://github.com/juice-shop/web3-contracts?

@github-actions
Copy link

This issue has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in one week if no further activity occurs.

@github-actions
Copy link

This issue has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in one week if no further activity occurs.

@github-actions
Copy link

This issue has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in one week if no further activity occurs.

Copy link

github-actions bot commented Nov 9, 2023

This issue has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in one week if no further activity occurs.

Copy link

This issue has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in one week if no further activity occurs.

@github-actions github-actions bot added the stale label Nov 24, 2023
Copy link

github-actions bot commented Dec 1, 2023

This issue was closed because it has been stalled for 7 days with no activity.

@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale Dec 1, 2023
@bkimminich bkimminich removed the stale label Dec 1, 2023
@bkimminich bkimminich reopened this Dec 1, 2023
Copy link

This issue has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in one week if no further activity occurs.

Copy link

This issue has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in one week if no further activity occurs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants