Solving the Backdoor challenge in 1 transaction

[Koowah]

Hi all,

I managed to get through the challenge with two transactions (deployment + call) using the callback. Can't seem to find a way to achieve it in one transaction however. I thought about doing everything in the constructor but it doesn't seem feasable here.
Anyone managed to do it ?

Also, where is the getStorageAt function below coming from ? It's in the WalletRegistry.sol file. I can't trace back to its definition.

Thanks,
Cheers 😄

[MiniGlome]

It's located in @gnosis.pm/safe-contracts/contracts/common/StorageAccessible.sol

[Koowah]

Thank you @MiniGlome

[MiniGlome]

I managed to get through the challenge with two transactions (deployment + call) using the callback. Can't seem to find a way to achieve it in one transaction however. I thought about doing everything in the constructor but it doesn't seem feasable here. Anyone managed to do it ?

I managed to complete the challenge in one transaction by deploying the backdoored module from the constructor.

[coderbradlee]

https://github.com/coderbradlee/damn-vulnerable-defi/blob/dev/contracts/backdoor/testWalletRegistry.sol#L61 look at this if you need hint