curta - CTF协议，玩家在其中创建和解决EVM

项目说明

<img align="right" width="150" height="150" top="100" src="./assets/curta.png">

Curta

Website - Docs - Twitter

A CTF protocol, where players create and solve E to earn NFTs.

The goal of players is to view the source code of the puzzle, interpret the code, solve it as if it was a regular puzzle, then the solution on-chain. If the solution is valid, a Flag Token with the corresponding metadata will be minted to their address.

Since puzzles are on-chain, e can view e else's submissions. The generati prevents front-running and allows for multiple winners: even if players view someone else's solution, they still have to figure out what the rules/constraints of the puzzle are and apply the solution to their respecti position.

Deployments

<table>
<thead>
<tr>
<th>Chain</th>
<th>Chain ID</th>
<th>Contract</th>
<th>v0.0.1</th>
<th>v0.0.2</th>
</tr>
</thead>
<tbody>
<tr>
<td rowspan="3">Mainnet</td>
<td rowspan="3">1</td>
<td><code><a href="
<td><code><a href="
<td>N/A</td>
</tr>
<tr>
<td><code><a href="
<td><code><a href="
<td>N/A</td>
</tr>
<tr>
<td><code><a href="
<td><code><a href="
<td>N/A</td>
</tr>
<tr>
<td rowspan="3">Goerli</td>
<td rowspan="3">5</td>
<td><code><a href="
<td><code><a href="
<td>N/A</td>
</tr>
<tr>
<td><code><a href="
<td><code><a href="
<td>N/A</td>
</tr>
<tr>
<td><code><a href="
<td><code><a href="
<td>N/A</td>
</tr>
<tr>
<td rowspan="4">Base Mainnet</td>
<td rowspan="4">8453</td>
<td><code><a href="
<td>N/A</td>
<td><code><a href="
</tr>
<tr>
<td><code><a href="
<td>N/A</td>
<td><code><a href="
</tr>
<tr>
<td><code><a href="
<td>N/A</td>
<td><code><a href="
</tr>
<td><code><a href="
<td>N/A</td>
<td><code><a href="
</tr>
<tr>
<td rowspan="4">Base Goerli</td>
<td rowspan="4">84531</td>
<td><code><a href="
<td>N/A</td>
<td><code><a href="
</tr>
<tr>
<td><code><a href="
<td>N/A</td>
<td><code><a href="
</tr>
<tr>
<td><code><a href="
<td>N/A</td>
<td><code><a href="
</tr>
</tr>
<tr>
<td><code><a href="
<td>N/A</td>
<td><code><a href="
</tr>
<tr>
<td rowspan="4">Base Sepolia</td>
<td rowspan="4">84532</td>
<td><code><a href="
<td>N/A</td>
<td><code><a href="
</tr>
<tr>
<td><code><a href="
<td>N/A</td>
<td><code><a href="
</tr>
<tr>
<td><code><a href="
<td>N/A</td>
<td><code><a href="
</tr>
</tr>
<tr>
<td><code><a href="
<td>N/A</td>
<td><code><a href="
</tr>
</tbody>
<table>

Usage

This project uses Foundry as its de/testing framework.

Installation

First, make sure you ha installed. Then, run the following commands to clone the repo and install its dependencies:

Testing

To run tests, run the following command:

If you'd like to test on a mainnet fork or view a sample AuthorshipToken.tokenURI output, run the following command:

Alternatively, to test the metadata output, follow the instructions in PrintAuthorshipTokenScript, and run the following command:

Co

To view co, run the following command:

To generate a report, run the following command:

> Note
> It may be helpful to use an extension like Co Gutters to display the co over the code.

Snapshot

To obtain the same .gas-snapshot output as the CI tests, copy .en into your .env file, and run the following command:

Deploying

#### 1. Set en
Create a file named .env at the root of the project and copy the contents of .en into it. Then, fill out each of the :
<table>
<thead>
<tr>
<th>Category</th>
<th></th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td rowspan="3">Deploy script configuration</td>
<td><code>DEPLOYER_PRI</code></td>
<td>The account to deploy an instance of <code>FlagRenderer</code> and fund each account below with 0.25 ETH each to deploy the protocol</td>
</tr>
<tr>
<td><code>AUTHORSHIP_TOKEN_PRI</code></td>
<td>The account to deploy <code>AuthorshipToken</code></td>
</tr>
<tr>
<td><code>CURTA_PRI</code></td>
<td>The account to deploy <code>Curta</code></td>
</tr>
<tr>
<td rowspan="4">RPC endpoints</td>
<td><code>RPC_URL_GOERLI</code></td>
<td>An RPC endpoint for Goerli</td>
</tr>
<tr>
<td><code>RPC_URL_MAINNET</code></td>
<td>An RPC endpoint for mainnet</td>
</tr>
<tr>
<td><code>RPC_URL_BASE_GOERLI</code></td>
<td>An RPC endpoint for Base Goerli</td>
</tr>
<tr>
<td><code>RPC_URL_BASE_MAINNET</code></td>
<td>An RPC endpoint for Base mainnet</td>
</tr>
<tr>
<td rowspan="2">API keys</td>
<td><code>ETHERSCAN_KEY</code></td>
<td>An <a href=" target="_blank" rel="noreferrer noopener"><b>Etherscan</b></a> API key for contracts</td>
</tr>
<tr>
<td><code>BASESCAN_KEY</code></td>
<td>A <a href=" target="_blank"
rel="noreferrer noopener"><b>Basescan</b></a> API key for
contracts</td>
</tr>
</tbody>
<table>

> [!WARNING]
> If accounts specified by AUTHORSHIP_TOKEN_PRI or CURTA_PRI have a nonzero account nonce (i.e. they have sent transactions) or are equal, the deploy script will most likely fail due to incorrect contract address precomputation (the script assumes each account has a nonce of 0).

> [!NOTE]
> The reason the addresses are precomputed are because AuthorshipToken and Curta must know each other's addresses when being deployed. Also, it allows for addresses :).

#### 2. Run commands to run deploy scripts
If you are deploying to a public chain, replace DeployMainnet and mainnet with your desired chain and run the following commands:

Acknowledgements

* Solmate
* Art Gobblers
* Foundry Canary
* Shields

项目信息

开发语言：Solidity

Star 数：136

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A CTF protocol, where players create and solve EVM puzzles to earn NFTs.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。