Skip to content

Latest commit

 

History

History
28 lines (22 loc) · 908 Bytes

README.md

File metadata and controls

28 lines (22 loc) · 908 Bytes
Raw

Awesomwasm 2023 CTF

Challenge 06: Hofund

The contract allow anyone to propose themselves for the owner role of the contract, the rest of the users can vote in favor by sending a governance token. If a proposal was voted for with more than a third of the current supply, the user gets the owner role.

Execute entry points:

pub enum ExecuteMsg {
    Propose {},
    ResolveProposal {},
    OwnerAction {
        action: CosmosMsg,
    },
    Receive(Cw20ReceiveMsg),
}

Please check the challenge's integration_tests for expected usage examples. You can use these tests as a base to create your exploit Proof of Concept.

🏠 Base scenario:

  • The contract is newly instantiated
  • Flash loans are available

⭐ Goal for the challenge:

  • Demonstrate how a proposer can obtain the owner role without controlling 1/3 of the total supply.