HomeCybersecurityReentrancy Attack Simulator

Reentrancy Attack Simulator

Deploy a vulnerable or checks-effects-interactions-safe withdraw contract, launch a malicious reentrancy attack and watch the recursive call stack, pool balance and drained funds play out live.

Cybersecurity3DAdvanced60 FPS
reentrancy-attack-simulator ↗ Open standalone

Deploy a vulnerable or checks-effects-interactions-safe withdraw contract, deposit funds into a shared pool alongside other users, then trigger a malicious contract's reentrancy attack. Watch the recursive call stack visualized as a rising tower of frames, the pool's liquid level drain in real time, a live balance-vs-time chart, and a final comparison of how much a vulnerable ordering bug lets an attacker drain versus the safe pattern that stops the exploit after a single legitimate withdrawal.

⚙ Under the hood

Deploy a vulnerable or checks-effects-interactions-safe Ethereum withdraw contract, then trigger a malicious reentrancy attack and watch the recursive call stack, live pool balance and drained funds unfold — vulnerable ordering lets a fallback function re-enter and drain the pool call after call, while updating the balance before sending funds stops the exploit after one withdrawal.

reentrancysmart-contract-securityethereumsoliditychecks-effects-interactionscybersecurity

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install

What did you find?

Add reproduction steps (optional)