Web3

Writing EVM opcodes manually and abusing CREATE2

Privileges check bypass and storage slot computation

Recovery of deployed contract address and inspection of NFTs metadata on IPFS

Exploitation of tx.origin and delegatecall to steal ERC20 tokens