# SunWeb3Sec/DeFiVulnLabs

To learn common smart contract vulnerabilities using Foundry!

Repository: https://github.com/SunWeb3Sec/DeFiVulnLabs
Canonical: https://ross.abutalabs.com/products/defivulnlabs
Language: Solidity
License Family: other
Topics: defi, ethereum, foundry, solidity, web3
Last push: 2025-04-24T04:07:49+00:00

## Health v2 (maintenance only)
Score: 40/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 18, release rhythm 35, longevity 100
- inputs: {"age_days": 1524, "days_push": 496, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1969, forks 348 (observed 2026-08-28T04:06:00.755474+00:00)

## What it is
A collection of 48 Solidity smart contract vulnerability labs with Foundry-based proof-of-concept tests, originally built as internal Web3 security training at XREX. Each lab demonstrates a common DeFi vulnerability (reentrancy, overflow, selfdestruct, unsafe delegatecall, etc.) with an exploitable test case.

## Use cases
- learn common smart contract vulnerabilities
- practice exploiting solidity bugs with foundry
- web3 security training exercises
- study reentrancy and delegatecall attack examples
- prepare for smart contract security audits
- reproduce solidity vulnerability proof of concepts

## When to choose
- you want hands-on labs for learning Solidity security
- you already use Foundry and want realistic vulnerability examples
- you're training for web3 security or audit work

## When to avoid
- you need production-ready secure contract templates
- you want a vulnerability scanner rather than educational material
- you need a formally licensed or audited codebase (no license provided)

## Facets
- artifact type: learning-resource
- maturity: active
- function: testing, security, developer-tools
- domain: blockchain, security, education, tutorials
- platform: cli, cross-platform
- tags: solidity, smart-contract-security, foundry, defi, web3, vulnerability-labs, exploit-pocs

## Member repositories
- SunWeb3Sec/DeFiVulnLabs (main) score 40

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:00.755474+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:05:09.192092+00:00, confidence not recorded.
  - readme: https://github.com/SunWeb3Sec/DeFiVulnLabs (fetched 2026-08-28T04:06:00.755474+00:00, sha 7ee376ea541c)
- Data as of 2026-08-30T08:39:29.467469+00:00.