Ethernaut CTF track

Exploit smart contracts in your browser.

The classic Ethernaut wargame, rebuilt as hands-on Foundry exploit challenges.

  • 16 levels
  • Beginner to advanced
  • No local setup
Start Ethernaut Browse other CTFs

Start with a challenge

View the full 16-level track
  1. 01 Fallback Beginner
  2. 02 Fallout Beginner
  3. 03 Coin Flip Beginner

Curated CTF library

Explore other CTFs

Compare trusted smart contract challenges by difficulty and focus.

6 CTFs shown

Difficulty
Focus

Smart contract CTF FAQ

What is a smart contract CTF?

A smart contract CTF is a security challenge where you exploit intentionally vulnerable blockchain contracts. These challenges help developers and auditors practice bugs such as reentrancy, access control failures, oracle manipulation, and broken accounting logic.

What are the best smart contract CTFs for beginners?

Ethernaut and Capture the Ether are good beginner-friendly options because they use smaller challenges that introduce common Ethereum and Solidity security concepts before moving into DeFi complexity.

Which smart contract CTF is best for DeFi security?

Damn Vulnerable DeFi is a strong DeFi-focused practice resource. It covers scenarios involving flash loans, lending, governance, oracles, AMMs, and token mechanics.

Are smart contract CTFs enough to become an auditor?

No. CTFs are useful for exploit practice, but real audits also require code review discipline, threat modeling, protocol understanding, invariant thinking, reporting skills, and familiarity with production codebases.

Should I read CTF writeups while solving?

Use writeups after a serious attempt. Reading too early can make the challenge feel clear without building the debugging and reasoning skills needed for real audits.