WhoAmI?
may be auditor
Block: 47
Author: Immunefi
AuditProfile
Security blog
Create Listing
#deposit
#withdraw
Hint
Maybe some kind of variable update was missed?
Answer
Because the code omits updating listings.deposit in withdraw(), the user can call it any number of times until the contract is emptied.
CTF
Capture the Ether The Ethernaut Damn Vulnerable DeFi CryptoZombies Speedrun Ethereum CipherShastra Mr Steal Yo Crypto Cryptohack DeFi Hack Ether Hack CTF protocol CTF Blockchain ChallengesAwesome Books
Uniswap V2 Book
by RareSkills
Uniswap V3 Book
by Jeiwan
Compound Book
by RareSkills
ZK Book
by RareSkills
Ethereum Book
by Andreas M. Antonopoulos, Gavin Wood
Beigepaper
by Micah Dameron
Useful tools
EVM diff
Compare execution layer differences between chains
EVM storage
Dive deep into the storage of any contract
