minaminao

security researcher, 🦙@AlpacaHack, ja:@2llr

[minaminao @vinami]

A new style of CTF for the AI era. Entertainment, not competition...

[AlpacaHack @AlpacaHack]

🎉今日でDaily AlpacaHackが始まってから半年！

これまで2,572人に遊んでいただき、182問の問題に、44,846個のフラグが提出されました！

これからも、競技の枠を超えた、新しい時代のCTFを目指して運営していきます🦙

[minaminao @vinami]

@rian_tkb これは絶対書いたほうが良く、追記しました（競技ではないのでヒントの追加は許されてほしい） こうい��感想、めちゃくちゃありがたいです……

[AlpacaHack @AlpacaHack]

We've launched Daily AlpacaHack, our daily CTF challenge 🎄

Beginner-friendly challenges every day:
• New problems on weekdays
• Selected problems from external CTFs on weekends

Now fully available in English!

https://t.co/Pnw37GNZnP

[minaminao @vinami]

@tko919_ @rsk0315_h4x 横からすみません。フラグ提出フォームにplaceholderがあり、そこにフラグフォーマットは明示されています。確かにCTFをやっていないと気づきにくいので問題文に注意書きしておくべきでしたね……（一応printableな文字列になることは間違いないのでprefixがわからなくても解くことはできます）

[minaminao @vinami]

@rsk0315_h4x そうです :D

[jinu @lj1nu]

I participated in ICC 2025. ICC is a CTF where teams compete by continent, with both Jeopardy-style and Attack & Defense CTFs.
I wanted to share a fun story from the A&D, where I tried exploit other teams internal tools.
Thanks to the organizers and players @icctokyo2025

[minaminao @vinami]

@Chovid99 @icctokyo2025 Great seeing you!

[minaminao @vinami]

I was on the dev team. Thank you for playing and supporting this event!

[International Cybersecurity Challenge TOKYO 2025 @icctokyo2025]

The award ceremony and the entire event of ICC TOKYO 2025 have concluded.
Thank you for the players' hard-fought match!
We appreciate support and effort of everyone who supported ICC TOKYO 2025.
#icctokyo2025

[minaminao @vinami]

Last week, I enjoyed COMPFEST and got two first bloods. First time using Huff "2", and the new builtins made building contracts easier. Also played JailCTF, not blockchain but really one of my favorites CTFs

[minaminao @vinami]

ctf-blockchain has hit 1k stars. thanks for all the fun challenges!
https://t.co/7hhr1jAcWY

[minaminao @vinami]

@blackth0rns_ thanks for inviting me!

[minaminao @vinami]

pushed the challs for hitcon, 07ctf, and cbc https://t.co/CF9Z67YllX

tried making a rev one on EVM that could easily be solved using a symbolic execution engine like hevm, but it ended up with 0 solves😭
hevm is now highly compatible with Foundry, the experience was quite good

[DeFiHackLabs @DeFiHackLabs]

HITCON CTF 2025
Date: UTC 08/22 14:00 ~ 08/24 14:00
https://t.co/QDdiyGlv3y

Thanks to @vinami from DeFiHackLabs for creating the web3 challenges for HITCON.

[Asian Cyber Security Challenge (ACSC) @acsc_asia]

🎯 ACSC 2025 Registration is OPEN!
🕛 Start: Aug 16 (Sat) 12:00 noon
🕛 End: Aug 17 (Sun) 12:00 noon

🔗 Register now: https://t.co/URuOSnxZvj
🌐 Official site: https://t.co/wmYM9Luwwb

🎮 The game is open to ALL players.
🌍 Finalists will be selected from ACSC member countries for #ICCTokyo2025 — but everyone’s welcome to join and play!

#ctf #acsc_ctf #icctokyo2025 #cybersecurity

[minaminao @vinami]

Long time no post — I've been casually running a CTF platform for individual players called @AlpacaHack for the past year. This weekend, we're hosting a new 6-hour Crypto round. Feel free to give it a try!
https://t.co/RlHmbvLW5s

[maple3142 @maple3142]

Finally completed the writeup for my challenge (ffmac) in AlpacaHack Round 9 (Crypto)
https://t.co/6V2UdaevHl

[minaminao @vinami]

@duncancmt it seems like there is no problem if you can specify salt to the factory contract, but are there any cases where it breaks?
I think it would be like the create2 factory contract

[minaminao @vinami]

Do you know that calling the function in the following EOF contract results in a revert?

This is definitely a potential pitfall ... 🙃

[minaminao @vinami]

@plotchy yeah that’s right
the extra sstore cost is consumed though 😢

[minaminao @vinami]

@windowhan thanks ❤️

[minaminao @vinami]

I created a challenge at SECCON CTF that explored EVM Object Format (EOF)🧩
It revealed two emerging pitfalls: Contract Recreation Failures and Call Return Mishandling.
It was tough—only 2 teams solved. Give it a try to deepen your understanding of EOF:
https://t.co/0vsEVcOu5I

[minaminao @vinami]

@real_philogy we must specify a salt 😢
so I think compilers should enforce the inclusion of a salt
the current Solidity PoC doesn’t do so …