NahamCon 2023 - Ethereum  Smart Contract Hacking Workshop

1 Preparation

Setting up ZIION or installing tools manually on Ubuntu

Setting up INFURA and Etherscan

2 Compile the project

• Clone the repository

git clone https://github.com/istvanbohm/nahamcon2023.git

• Enter the brownie directory

cd nahamcon2023/brownie/

• Install the required NPM packages by executing the following command from the brownie directory

npm install

3 Simulate the Ethereum blockchain locally

Simulate the blockchain locally using ganache, to start executing the following command:

ganache-cli --hardfork istanbul --fork https://mainnet.infura.io/v3/<INFURA_KEY> -i 80000000

Note that you need to get the URL from INFURA.

After running ganache, wait for the "RPC Listening on 127.0.0.1:8545" message, then execute the following command from the brownie directory:

brownie console --network mainnet-fork

4 Get familiar with Brownie and how to interact with the smart contract

• The scripts folder contains example brownie scripts.
• Paste scripts section by section and examine the behavior of the contracts.
• Learn the syntax using the examples
• The brownie documentation can be found here:

https://eth-brownie.readthedocs.io/en/stable/
https://eth-brownie.readthedocs.io/_/downloads/en/stable/pdf/

5 Start Hacking

Identify vulnerabilities in the contracts.