Unlocking the Lockbox2 | ParadigmCTF’22

• paradigm-ctf-2021

  2 520 0.0 Solidity

  Official repository for Paradigm CTF 2021

  

Lockbox (the first) was very interesting challenge. I attempted it last year during the CTF, found it very tough. This year’s challenge isn’t any less. From seeming like you can do it, then making you feel like it’s literally impossible, Lockbox kept the reputation with it's 2nd iteration.

• lockbox2-rocks

  1 0 1.8 Solidity

  Solution to the ParadigmCTF's Lockbox2 challenge

The Lockbox2 challenge is available here. In this post, we'll understand the challenge and solve it (based on how I approached it during the CTF). I've posted links wherever necessary. As a heads up, this is a quite long post, it's intended for beginners/intermediates to be able to follow. For experts, feel free to skim through the post or directly skip to the final solution here.

• SurveyJS

  surveyjs.io sponsored

  Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App. With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

  

• ethereumjs-monorepo

  14 2,483 9.6 TypeScript

  Monorepo for the Ethereum VM TypeScript Implementation

  

If it is a precompile, then we have just a handful of choices.

• ethers-repl

  1 13 6.9 JavaScript

  🔪 Ethers.js in Node.js REPL

I’ll just use ethers.js in my terminal (using ethers-repl) to get a wallet real quick. You can use anything which gets the job done.

• evm-run

  1 26 3.2 JavaScript

  🏃 Run EVM code from console or file, on local or mainnet fork.

I'm using evm-run for assembling + running evm code. (Sidenote: you can checkout ETK which helps with labels as well).

• etk

  1 344 6.9 Rust

  evm toolkit

  

I'm using evm-run for assembling + running evm code. (Sidenote: you can checkout ETK which helps with labels as well).

• hardhat-tracer

  4 329 7.5 TypeScript

  🕵️ allows you to see internal calls, events and storage operations in the console

Now execute the tx, and you should see stage4 pass. I’m using Hardhat framework to view the execution trace, using the hardhat-tracer plugin. (Sidenote: A great alternative is using Foundry and it also has tracing built-in).

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• foundry

  39 7,530 9.9 Rust

  Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.

  

Now execute the tx, and you should see stage4 pass. I’m using Hardhat framework to view the execution trace, using the hardhat-tracer plugin. (Sidenote: A great alternative is using Foundry and it also has tracing built-in).

Suggest a related project