
The Bugchain challenge presents a simplified blockchain implementation with intentional vulnerabilities. Your task is to identify and exploit these weaknesses, highlighting common pitfalls in blockchain design and implementation.

## Challenge Goals

- Understand core blockchain implementation concepts
- Identify security vulnerabilities in consensus mechanisms
- Learn about proper validation in decentralized systems
- Explore attack vectors against blockchain protocols

Originally presented at ALLES CTF 2021, this challenge offers a unique perspective on blockchain security by focusing on the fundamental structures and mechanisms that can be compromised if not implemented correctly. It provides valuable insights for developers working on custom blockchain solutions. 

Find and exploit bugs in a simplified blockchain implementation built on Solana.

Bugchain


This workshop from PwnedNoMore examines the infamous Cashio protocol exploit that resulted in millions of dollars in losses. By recreating a simplified version of the vulnerability, you'll understand the critical security flaw that led to the hack.

## Workshop Content

- Step-by-step recreation of the Cashio protocol exploit
- Detailed explanation of account validation vulnerabilities
- Hands-on exercises to understand signature verification issues
- Analysis of how proper security checks could have prevented the exploit

The workshop provides valuable insights for Solana developers working on DeFi protocols, highlighting the importance of proper account validation and the risks of insufficient security checks in financial applications. 

Learn about the famous Cashio exploit that led to millions in losses, through a step-by-step workshop recreating the vulnerability.

Cashio Exploit Workshop


Welcome to CryptoHack! These introductory challenges are designed to walk you through the process of solving challenges and submitting flags. Complete the challenges to earn your first gold trophy.

Learn about modern cryptography by solving a series of interactive puzzles and challenges.

CryptoHack


Darksols presents a series of Solana security puzzles that progressively test your understanding of smart contract vulnerabilities and exploitation techniques. The challenge is designed to simulate complex security scenarios you might encounter in production environments.

## Challenge Goals

- Identify and exploit complex vulnerabilities in Solana contracts
- Understand advanced program security concepts
- Learn about intricate account relationships and validation
- Develop sophisticated exploit chains for smart contract vulnerabilities

Originally presented at justCTF 2022, this challenge provides a comprehensive test of your Solana security knowledge, requiring both analytical thinking and creative exploitation approaches to overcome its intentionally vulnerable smart contracts. 

Navigate through multiple security puzzles in this Solana smart contract exploitation challenge.

Darksols


The HalbornCTF Solana challenges are created by professional security auditors at Halborn, a blockchain security firm. These challenges reflect real-world vulnerabilities discovered during professional audits, presented in an educational format.

## Challenge Goals

- Learn about security issues from professional auditors' perspectives
- Understand common vulnerabilities identified in production code
- Develop practical skills for identifying security flaws
- Practice exploitation techniques used in professional security assessments

These challenges provide a unique opportunity to learn from security professionals who audit Solana contracts for a living, offering insights into the methods and approaches used by professional security researchers when analyzing smart contract security. 

A series of security challenges designed by professional auditors at Halborn to test Solana smart contract security knowledge.

HalbornCTF Solana


League of Lamports focuses on Solana's account system and secure token handling mechanisms. The challenge tests your ability to identify vulnerabilities in account validation and token operations, which are fundamental to Solana's security model.

## Challenge Goals

- Understand Solana's account validation requirements
- Identify improper validation checks in account handling
- Learn about secure token management practices
- Explore attack vectors related to account and lamport manipulation

Originally presented at justCTF 2022, this challenge highlights the importance of proper account validation and token handling in Solana programs. It addresses one of the most common sources of vulnerabilities in Solana smart contracts, making it highly relevant for practical security applications. 

Test your understanding of Solana's account system and secure token handling in this CTF challenge.

League of Lamports


The Legit Bank challenge simulates a financial application built on Solana, where you'll identify and exploit vulnerabilities in banking operations. This challenge tests your understanding of financial security concepts in blockchain environments.

## Challenge Goals

- Understand account management and security in financial applications
- Identify vulnerabilities in transaction processing systems
- Learn about secure fund management in smart contracts
- Explore common attack vectors against financial protocols

Originally presented at ALLES CTF 2021, this challenge provides valuable insights into the specific security considerations necessary when building financial applications on Solana, including proper validation, transaction handling, and fund protection mechanisms. 

Explore financial security issues in Solana smart contracts through this banking simulation challenge.

Legit Bank


Moar Horse 5 is a challenging exploitation task that targets lower-level Solana program vulnerabilities, with a focus on memory safety and validation issues that can lead to program compromise.

## Challenge Goals

- Identify memory safety vulnerabilities in Solana programs
- Understand the impact of improper input validation
- Learn exploitation techniques specific to the Solana runtime environment
- Develop skills for analyzing program behavior at a low level

Originally presented at TJCTF 2022, this challenge provides advanced insights into Solana security, especially for developers interested in the intersection between traditional application security concepts and blockchain-specific vulnerabilities. 

A unique Solana program exploitation challenge focused on memory safety and validation issues.

Moar Horse 5


These Solana CTF challenges help you learn smart contract security by finding and exploiting vulnerabilities. The collection includes challenges from various competitions and workshops, covering different security concepts in the Solana ecosystem.

## Available Challenges

- **Neodyme Workshop Levels 1-4**: A progressive series of challenges teaching Solana security fundamentals
- **Secret Store**: Learn about data privacy vulnerabilities
- **Legit Bank**: Explore financial contract security issues
- **Bugchain**: Find and exploit bugs in a blockchain implementation
- **Solfire**: Solana contract exploitation challenge
- **Darksols**: Smart contract security puzzle
- **Halborn CTF**: Security challenges from Halborn
- **Moar Horse 5**: Program exploitation challenge
- **Cashio Exploit Workshop**: Based on a real-world exploit
- **Solhana 1-3**: Series of progressive security challenges
- **Pool**: Advanced contract exploitation puzzle
- **League of Lamports**: Account security challenge

Each challenge simulates real-world vulnerabilities to help you understand common security pitfalls when developing on Solana. 

A collection of Solana Capture The Flag (CTF) challenges to learn smart contract security by finding and exploiting vulnerabilities.

Neodyme Solana CTF Challenges


The Pool challenge simulates vulnerabilities in DeFi liquidity pool contracts on Solana. This advanced challenge tests your understanding of complex financial protocols and their potential security weaknesses.

## Challenge Goals

- Understand DeFi liquidity pool implementations on Solana
- Identify security vulnerabilities in complex financial protocols
- Learn about mathematical and logical exploits in financial systems
- Develop skills for auditing sophisticated DeFi applications

Originally presented at Paradigm CTF, this challenge reflects the complexity of real-world DeFi protocols and the security considerations they require. It's particularly valuable for developers working on financial applications in the Solana ecosystem. 

A complex Solana DeFi contract exploitation challenge focusing on liquidity pool vulnerabilities.

Pool


This challenge focuses on the privacy aspects of smart contract data storage on Solana. You'll explore how seemingly private data can potentially be exposed and learn techniques for secure data handling in blockchain environments.

## Challenge Goals

- Understand how data is stored in Solana programs
- Identify common privacy vulnerabilities in smart contracts
- Learn techniques to securely handle sensitive information
- Develop exploitation skills for identifying data leakage

The challenge was originally presented at ALLES CTF 2021 and provides practical insights into the security considerations necessary when handling private data in public blockchain environments. 

Learn about data privacy vulnerabilities in Solana smart contracts through this CTF challenge.

Secret Store


This workshop teaches Solana smart contract security from an attacker's perspective. By finding and exploiting vulnerabilities in prepared contracts, you'll learn to write more secure code and understand what to watch out for.

## Workshop Challenges

- **Level 1 - Personal Vault**: Discover authorization vulnerabilities in a simple vault contract
- **Level 2 - Secure Personal Vault**: Learn about program-derived addresses and security checks
- **Level 3 - Tip Pool**: Find issues in shared funds management
- **Level 4 - SPL-Token Vault**: Explore token-specific security concerns

The workshop provides a simplified framework for creating proof-of-concept exploits, making it accessible even if you're new to Solana security. Each level comes with optional hints if you get stuck. 

Learn Solana smart contract security through hands-on vulnerability exploits in this workshop from Neodyme.

Neodyme Workshop Level 1-4


Solfire is a focused security challenge that tests your ability to identify and exploit vulnerabilities in Solana programs. The challenge simulates real-world security issues commonly found in production smart contracts.

## Challenge Goals

- Identify common vulnerabilities in Solana contract implementations
- Develop exploit techniques specific to the Solana runtime
- Understand program validation and security checks
- Learn about secure program architecture

Originally presented at picoCTF, this challenge helps you build practical skills for auditing and securing Solana smart contracts, with a focus on practical exploitation techniques relevant to real-world scenarios. 

Test your Solana contract exploitation skills in this focused security challenge.

Solfire


Solhana is a series of three progressive challenges that explore different types of vulnerabilities in Solana smart contracts. Each level increases in complexity, introducing new security concepts and exploitation techniques.

## Challenge Goals

- Learn about various vulnerability classes in Solana programs
- Understand how different attack vectors can be exploited
- Progress through increasing levels of security complexity
- Develop a comprehensive understanding of Solana security principles

Originally presented at Paradigm CTF, this challenge series offers a structured approach to learning Solana security, making it ideal for developers who want to systematically improve their understanding of smart contract vulnerabilities and exploitation techniques. 

A progressive series of Solana security challenges focusing on different vulnerability types in smart contracts.

Solana Code Challenges

🏆 Cashio Exploit Workshop

🏆 Neodyme Solana CTF Challenges

🏆 Neodyme Workshop Level 1-4