VibeCoding is a smart contract–based concentration challenge where users can test their focus by joining a “vibe challenge.”
Players deposit a small entry fee to participate, and upon completion, they can claim rewards if they succeed.
Think of it as a “focus-to-earn” experiment — powered by blockchain transparency.
Github repo link: https://github.com/shubhajeet26/VibeCoding
This challenge focuses on analyzing a token Vault smart contract to uncover a logical flaw in how it handles deposits, withdrawals, and strategy fund transfers. The goal is to understand how incorrect accounting or manipulated price inputs could lead to fund misallocation or locking. Participants must identify the weakness, demonstrate its impact, and propose secure design improvements. The mission emphasizes smart contract auditing, oracle safety, and robust asset-management logic.
Identify and exploit a logical flaw in a token Vault smart contract where deposits, withdrawals, and strategy transfers are handled. The challenge is to find how an attacker can manipulate contract states or price inputs to drain or lock user funds.
The flaw in the Vault smart contract occurs due to incorrect asset-share calculation and reliance on an unprotected price input. Because the contract does not properly account for total assets during deposits and withdrawals, a manipulated price or state can cause users to receive more or less than their actual share. The fix is to use consistent totalAssets() accounting, add proper validation for price inputs, and include safety checks like reentrancy protection and rate limits. These measures ensure the Vault cannot be drained or locked by manipulated contract states or oracle values.
India