Skip to content
Request an audit

Turning an out-of-scope root cause into an in-scope exploit

We continued the Mento V3 contest on Cantina.

Lesson Summary:

  • Simao picked out where the bugs were most likely to be from what the sponsors said alone;
  • When a lead's root cause sits in an out-of-scope contract, treat that behaviour as intended and look for a way to exploit it through the in-scope contracts;
  • Study the `Insert` function in the library;
  • Look for a way to exploit the case where the timestamp median and the value median differ;
  • Try to turn the first bug into a working exploit.
Watch the session on YouTube ↗
Message on Telegram All 62 posts