A set of challenges to learn offensive security of smart contracts in Ethereum.
Featuring flash loans, price oracles, governance, NFTs, lending pools, smart contract wallets, timelocks, and more!
Visit damnvulnerabledefi.xyz
There are comments on the hardhat test files of each challenge, and also @audit-issue tags on the specific parts of the contracts' code that are vulnerable.
Attacker contracts are present in the same folder as the victim contracts where needed.