Public reproduction file
src/test/2023-02/BonqDAO_exp.sol
Public reproduction file for dataset entry - BonqDAO.
Code
Verbatim source from the public dataset at the pinned commit below. Licence header preserved. ThreatWire has not executed this code. It is shown for defensive research, as published in the public reference dataset. Check licences, verify the blob against the pinned commit, and do not run it against live contracts without your own review.
Attacker, Exploitlines 1–184
PriceReporter, ITellorFlex, IOriginalTroveFactorylines 185–458
ITrovelines 459–532
Analysis
Dataset entry
Public Foundry test for “- BonqDAO” (2023-02-02). Addresses, transactions and links below are taken from comments in the file itself. ThreatWire has not verified them on-chain and has not executed this file.
Related files
14 linkedImports used by this file, other reproduction files from the same month or protocol in the dataset, and patterns for the same incident. Each opens in our reader with verbatim source.
- src/test/2023-02/CowSwap_exp.solSame month in the dataset · 64 lines
- src/test/2023-02/Dexible_exp.solSame month in the dataset · 83 lines
- src/test/2023-02/dForce_exp.solSame month in the dataset · 382 lines
- src/test/2023-02/DYNA_exp.solSame month in the dataset · 132 lines
- src/test/2023-02/EFVault_exp.solSame month in the dataset · 38 lines
- src/test/2023-02/FDP_exp.solSame month in the dataset · 114 lines
- src/test/2023-02/LaunchZone_exp.solSame month in the dataset · 146 lines
- src/test/2023-02/Orion_exp.solSame month in the dataset · 191 lines
- src/test/2023-02/Platypus_exp.solSame month in the dataset · 138 lines
- src/test/2023-02/RevertFinance_exp.solSame month in the dataset · 91 lines
- src/test/2023-02/Sheep_exp.solSame month in the dataset · 72 lines
- src/test/2023-02/USDs_exp.solSame month in the dataset · 51 lines
- src/test/2023-02/Starlink_exp.solSame month in the dataset · 80 lines
- src/test/2023-02/SwapX_exp.solSame month in the dataset · 83 lines
Listed in the source file
Listed by the source dataset, not verified by ThreatWire
- Attacker
0xcacf2d28b2a5309e099f0c6e8c60ec3ddf656642
- Vulnerable Contract
0x8f55d884cad66b79e1a131f6bcb0e66f4fd84d5b
- Explorer: https://polygonscan.com/address/0x8f55d884cad66b79e1a131f6bcb0e66f4fd84d5b#code#F2#L282
- Reference: https://twitter.com/BlockSecTeam/status/1621043757390123008
- Reference: https://twitter.com/i/web/status/1621006016065474560
- Reference: https://twitter.com/peckshield/status/1620926816868499458
- Reference: https://twitter.com/CertiKAlert/status/1621008399772024833
- Reference: https://twitter.com/SlowMist_Team/status/1621087651158966274
- Explorer: https://polygonscan.com/address/0xed596991ac5f1aa1858da66c67f7cfa76e54b5f1#tokentxns
File record
- Name
- BonqDAO
- Path
- src/test/2023-02/BonqDAO_exp.sol
- Repository
- SunWeb3Sec/DeFiHackLabs (licence Apache-2.0)
- Commit
- 7363f76db51f0fea97f8e659b20ee8bdc5fbca25
- Blob
- c916d83fd25e30593fbda21c498628a1c34a53ea
- Language
- Solidity
- Size
- 533 lines
- Date
- 2023-02-02
- Licence
- file header UNLICENSED; repository Apache-2.0
- Retrieved
- 2026-10-19
Provenance
Path src/test/2023-02/BonqDAO_exp.sol, commit 7363f76db51f0fea97f8e659b20ee8bdc5fbca25, blob c916d83fd25e30593fbda21c498628a1c34a53ea, retrieved 2026-10-19. Verbatim file via git show at the pinned commit; SPDX header preserved. ThreatWire has never executed this file. Reference: source file at the pinned commit.