→ The method

Four principles behind every lab.

Flaw and fix, always paired

Every vulnerable contract ships with its patched twin. You see the exact lines that fail, run the attack, then watch the same attack revert against the fix. The lesson sticks because you felt both outcomes.

Theory grounded in a live target

No abstract slides. Each concept — reentrancy, oracle manipulation, access control — is attached to a real objective against a live target whose state you watch change as you exploit it.

Defence-first, always

You learn offence to build defence. Every lab frames the exploit as a lesson in mitigation: guards, checks-effects-interactions, pull payments, manipulation-resistant feeds.

No prior Solidity assumed

Start from nervous beginner. Annotated code, progressive hints that never cost points, and a terminal that stays hidden until you want it. Ramp to auditor at your own pace.