ChainForge EVM Invariant Breaker · JOSH.PLAY

ChainForge EVM Invariant Stepper

OllyDbg Bytecode Debugger

Step through raw opcodes to trigger smart-contract invariant violations.

Target ContractEulerVault.sol (Block #16817996)

PC · Opcode · ArgumentsAssembly Annotation

▶0x00PUSH10x20

Load calldata offset for attack payload

0x02CALLDATALOAD

Read donationAmount (150 ETH flashloan)

0x03DUP1

Duplicate donation value on stack

0x04PUSH10x01

Target slot 0x01: totalCollateral

0x06SLOAD

Current collateral: 100 ETH

0x07SUB

Simulate donation drain: 100 - 80 = 20 ETH

0x08PUSH10x01

Storage slot 0x01

0x0aSSTORE

Mutate totalCollateral = 20 ETH

0x0bPUSH10x02

Target slot 0x02: totalBorrowed

0x0dSLOAD

Current debt: 150 ETH

0x0eLT

Evaluate Invariant: (20 < 150) => True (Violation!)

0x0fJUMPI0x1c

Jump to liquidation bypass routine

0x11REVERT

Safeguard triggered: Invariant breach

Mathematical Invariant WatcherINVARIANT SATISFIED

Assertion Condition:collateral >= borrowed

Total Collateral (Slot 0x01):100 ETH

Total Borrowed (Slot 0x02):150 ETH

Live EVM Call StackDepth: 1

[SP+0]0x0000000000000000000000000000000000000064

[SP+1]0x0000000000000000000000000000000000000096

[SP+2]0x0000000000000000000000000000000000000001

Initializing System Sandbox…