Take Over via Missing onlyOwner
blockchain · easy · +30 XP
Target
GET /api/lab/access-ctrl-101/contract (Solidity source)
POST /api/lab/access-ctrl-101/call body {fn, args} → simulated tx
POST /api/lab/access-ctrl-101/submit body {owner_call_fn}
Goal: scan the source for an externally-callable fn that mutates owner WITHOUT onlyOwner. Call it. Submit the function name.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/access-ctrl-101/
// reuse on the cli
// submit flag
// no solves yet
3 of 7 · blockchain