Practical overview
When it fits
Use it as a hands-on introductory lab when learning to recognize reentrancy patterns or practicing basic Solidity exploit demonstrations.
Who it is for
- Smart-contract developers working to improve secure-coding practices.
- Beginner auditors and security learners seeking an overview of reentrancy bug types and basic exploit proof-of-concept construction.
Documented uses
- Study how basic, token-callback, cross-function, cross-contract and read-only reentrancy examples differ.
- Modify attacker-contract templates to attempt the supplied proof-of-concept tests.
- Use Foundry tests to examine whether a basic exploit scenario succeeds.
Requirements & limits
The repository is public and identified as open source under GPL-3.0. Its documented exercises use Foundry and Solidity.
- Foundry is the documented environment for the exploitation tests.
- The repository asks users to install Foundry's standard library and OpenZeppelin contracts for the workshop exercises.
- The README describes the material as basic and cautions that it may be too introductory for learners already advanced in Solidity security.
Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.
Set up the repository for Foundry workshop exercises
Prepare the repository dependencies and import remappings used by the Solidity exercises.
Before you start
- Foundry installed
- The All Things Reentrancy repository cloned locally
Steps
From the repository directory, install the Foundry standard library with
forge install foundry-rs/forge-std.Install OpenZeppelin contracts with
forge install openzeppelin/openzeppelin-contracts.List the remappings with
forge remappings.Create a remappings file with
forge remappings > remappings.txt.
Expected outcome
Foundry has the listed exercise dependencies and a remappings file for editor import resolution.
Guide limitations
- These steps prepare the workshop project; they do not complete an attacker contract or run a proof-of-concept test.
Sources & review
Source record details
- Source availability
- Active
- Sources checked
- 14 October 2026
- Original website title
- jcsec-security/all-things-reentrancy · Official homepage title · retained in its source language