minaminao

@rian_tkb これは絶対書いたほうが良く、追記しました（競技ではないのでヒントの追加は許されてほしい） こういう感想、めちゃくちゃありがたいです……

今日の daily alpacahack、client-side 問題を解いたことないせいで（というよりかは docker と dns が何もわからないせいで）めちゃくちゃな勘違いをしていた、こういうのこそ初心者向けヒントに書いておいてほしいが、単に自分がアホすぎるだけかも

We've launched Daily AlpacaHack, our daily CTF challenge 🎄 Beginner-friendly challenges every day: • New problems on weekdays • Selected problems from external CTFs on weekends Now fully available in English! alpacahack.com/daily?lang=en

@tko919_ @rsk0315_h4x 横からすみません。フラグ提出フォームにplaceholderがあり、そこにフラグフォーマットは明示されています。確かにCTFをやっていないと気づきにくいので問題文に注意書きしておくべきでしたね……（一応printableな文字列になることは間違いないのでprefixがわからなくても解くことはできます）

@rsk0315_h4x TSG LIVEの過去問であることしか明記されていないように見えるんですが、prefixが固定であることはコンテストページに行かないと分からなくないですか？（CTFの不文律を何も知らないので適当なことを言っています）

daily alpacahackのsize limitのwriteupを読んだが、prefixが分かっていないと解きようがなくないか

@rsk0315_h4x そうです :D

AdC 企画じゃなくて半永久的に続くってこと？

I participated in ICC 2025. ICC is a CTF where teams compete by continent, with both Jeopardy-style and Attack & Defense CTFs. I wanted to share a fun story from the A&D, where I tried exploit other teams internal tools. Thanks to the organizers and players @icctokyo2025

@Chovid99 @icctokyo2025 Great seeing you!

Thanks for the memories @icctokyo2025. I enjoyed the event a lot, probably one of the best and most fun CTFs so far. The pwn challenges’ quality was top notch. Huge thanks to the ASEAN team for giving me the chance to represent, and huge thanks to the ICC organizers ❤️

I was on the dev team. Thank you for playing and supporting this event!

Last week, I enjoyed COMPFEST and got two first bloods. First time using Huff "2", and the new builtins made building contracts easier. Also played JailCTF, not blockchain but really one of my favorites CTFs

ctf-blockchain has hit 1k stars. thanks for all the fun challenges! github.com/minaminao/ctf-…

@blackth0rns_ thanks for inviting me!

@vinami amazing work done by @vinami

pushed the challs for hitcon, 07ctf, and cbc github.com/minaminao/my-c… tried making a rev one on EVM that could easily be solved using a symbolic execution engine like hevm, but it ended up with 0 solves😭 hevm is now highly compatible with Foundry, the experience was quite good

HITCON CTF 2025 Date: UTC 08/22 14:00 ~ 08/24 14:00 ctf2025.hitcon.org Thanks to @vinami from DeFiHackLabs for creating the web3 challenges for HITCON.

🎯 ACSC 2025 Registration is OPEN! 🕛 Start: Aug 16 (Sat) 12:00 noon 🕛 End: Aug 17 (Sun) 12:00 noon 🔗 Register now: docs.google.com/forms/d/e/1FAI… 🌐 Official site: acsc.asia 🎮 The game is open to ALL players. 🌍 Finalists will be selected from ACSC member countries for #ICCTokyo2025 — but everyone’s welcome to join and play! #ctf #acsc_ctf #icctokyo2025 #cybersecurity

Long time no post — I've been casually running a CTF platform for individual players called @AlpacaHack for the past year. This weekend, we're hosting a new 6-hour Crypto round. Feel free to give it a try! alpacahack.com/ctfs/round-13

Finally completed the writeup for my challenge (ffmac) in AlpacaHack Round 9 (Crypto) github.com/maple3142/My-C…

@duncancmt it seems like there is no problem if you can specify salt to the factory contract, but are there any cases where it breaks? I think it would be like the create2 factory contract

@vinami @real_philogy This seems Bad. Doesn't this mean that factory contracts that CREATE from calldata won't work after EOF? Seems like that breaks a lot of important use cases that rely on deterministic, permissionless deployment of trusted contracts to predictable addresses across all chains.

Do you know that calling the function in the following EOF contract results in a revert? This is definitely a potential pitfall ... 🙃

@plotchy yeah that’s right the extra sstore cost is consumed though 😢

@vinami easiest would be to sstore an accumulator

@windowhan thanks ❤️

@vinami Good challenge!

I created a challenge at SECCON CTF that explored EVM Object Format (EOF)🧩 It revealed two emerging pitfalls: Contract Recreation Failures and Call Return Mishandling. It was tough—only 2 teams solved. Give it a try to deepen your understanding of EOF: github.com/minaminao/my-c…

@real_philogy we must specify a salt 😢 so I think compilers should enforce the inclusion of a salt the current Solidity PoC doesn’t do so …

@vinami seems like a bug, this should work in EOF

you can try it using github.com/paradigmxyz/fo…