🚩 Solana CTF Challenges 🚩

This is a repository of backups of Solana CTF challenges. The challenges were created by different authors and belong to the respective authors as listed below. If an author would like their challenge to be removed from this repository, please contact us.

Challenges

Challenge	Author	Link
Neodyme Workshop Level 1-4	Neodyme	https://workshop.neodyme.io/
Secret Store	localo	https://ctftime.org/task/17180
Legit Bank	CherryWorm, bennofs	https://ctftime.org/task/17188
Bugchain	CherryWorm	https://ctftime.org/task/17160
Solfire	NotDeGhost	https://play.picoctf.org/practice/challenge/302?originalEvent=70&page=6
Darksols	embe221ed	https://2022.justctf.team/challenges/40
HalbornCTF Solana	Halborn	https://github.com/HalbornSecurity/CTFs/tree/master/HalbornCTF_Rust_Solana
Moar Horse 5	kfb	https://github.com/TJCSec/tjctf-2022-challenges/tree/master/pwn/moar-horse-5
Cashio Exploit Workshop	PwnedNoMore	https://github.com/PwnedNoMore/cashio-exploit-workshop
Solhana 1-3	Hana	https://ctf.paradigm.xyz/
Pool	???	https://ctf.paradigm.xyz/
League of Lamports	embe221ed	https://2022.justctf.team/challenges/53

Getting Started

• https://blog.neodyme.io/posts/solana_common_pitfalls/

FAQ

What is a CTF?

CTF stands for Capture The Flag. In this context, CTF refers to a Cybersecurity competition, where participants solve challenges to gain points. Challenges are small security-related puzzles mimicking real-life vulnerabilities. In the context of Solana, a challenge would be a vulnerable smart contract that can be exploited by an attacker.

What is the purpose of this repository?

CTF challenges are one of the best way to learn security. However, Solana-specific challenges are spread across the internet, and might be deleted or lost. This repository aims to preserve Solana CTF challenges so that developers and auditors can easily find them.

How do I use this repository?

You can use this repository to learn Solana smart contract auditing by trying to find exploitable bugs in the challenges. Some challenges come with Docker containers that allow you to easily instantiate and interact with them.

A Solana Challenge that I know isn't listed here!

Please create a Pull Request, or an Issue to add the missing Challenge!