2
2
3
3
** Reproduce DeFi hack incidents using Foundry.**
4
4
5
- 522 incidents included.
5
+ 523 incidents included.
6
6
7
7
Let's make Web3 secure! Join [ Discord] ( https://discord.gg/Fjyngakf3h )
8
8
@@ -196,9 +196,9 @@ If you appreciate our work, please consider donating. Even a small amount helps
196
196
197
197
[ 20240401 ATM] ( #20240401-atm---business-logic-flaw )
198
198
199
- [ 20240401 OpenLeverage] ( #20240401-openleverage---reentrancy )
199
+ [ 20240401 OpenLeverage] ( #20240401-openleverage---business-logic-flaw )
200
200
201
- [ 20240329 ETHFIN] ( #20240329-ethfin---price-manipulation )
201
+ [ 20240329 ETHFIN] ( #20240329-ethfin---lack-of-access-control )
202
202
203
203
[ 20240329 PrismaFi] ( #20240329-prismaFi---insufficient-validation )
204
204
@@ -258,7 +258,7 @@ If you appreciate our work, please consider donating. Even a small amount helps
258
258
259
259
[ 20240215 DualPools] ( #20240215-DualPools---precision-truncation )
260
260
261
- [ 20240215 Babyloogn] ( #20240215-Babyloogn---reentrancy )
261
+ [ 20240215 Babyloogn] ( #20240215-Babyloogn---lack-of-validation )
262
262
263
263
[ 20240215 Miner] ( #20240215-Miner---lack-of-validation-dst-address )
264
264
@@ -294,11 +294,11 @@ If you appreciate our work, please consider donating. Even a small amount helps
294
294
295
295
[ 20240117 SocketGateway] ( #20240112-socketgateway---lack-of-calldata-validation )
296
296
297
- [ 20240115 Shell_MEV_0xa898] ( #20240115-Shell_MEV_0xa898---loss -of-precision )
297
+ [ 20240115 Shell_MEV_0xa898] ( #20240115-Shell_MEV_0xa898---lack -of-access-control )
298
298
299
299
[ 20240112 WiseLending] ( #20240112-wiselending---bad-healthfactor-check )
300
300
301
- [ 20240110 Freedom] ( #20240110-Freedom---loss -of-precision )
301
+ [ 20240110 Freedom] ( #20240110-Freedom---lack -of-access-control )
302
302
303
303
[ 20240110 LQDX Alert] ( #20240110-lqdx---unauthorized-transferfrom )
304
304
@@ -556,13 +556,13 @@ If you appreciate our work, please consider donating. Even a small amount helps
556
556
557
557
[ 20230630 Biswap] ( past/2023/README.md#20230630-biswap---v3migrator-exploit )
558
558
559
- [ 20230630 MyAi] ( #20230630-MyAi---business-loigc )
559
+ [ 20230630 MyAi] ( past/2023/README.md #20230630-MyAi---business-loigc)
560
560
561
561
[ 20230628 Themis] ( past/2023/README.md#20230628-themis---manipulation-of-prices-using-flashloan )
562
562
563
563
[ 20230627 UnverifiedContr_9ad32] ( past/2023/README.md#20230627-unverifiedcontr_9ad32---business-loigc-flaw )
564
564
565
- [ 20230627 STRAC] ( #20230627-STRAC---business-loigc )
565
+ [ 20230627 STRAC] ( past/2023/README.md #20230627-STRAC---business-loigc)
566
566
567
567
[ 20230623 SHIDO] ( past/2023/README.md#20230623-shido---business-loigc )
568
568
@@ -762,7 +762,7 @@ If you appreciate our work, please consider donating. Even a small amount helps
762
762
763
763
[ 20221211 Lodestar] ( past/2022/README.md#20221211---lodestar---flashloan-price-manipulation )
764
764
765
- [ 20221211 MEVbot_0x28d9] ( past/2022/README.md#20221211---MEVbot_0x28d9---precision-loss )
765
+ [ 20221211 MEVbot_0x28d9] ( past/2022/README.md#20221211---MEVbot_0x28d9---insufficient-validation )
766
766
767
767
[ 20221210 MUMUG] ( past/2022/README.md#20221210---mumug---flashloan-price-manipulation )
768
768
@@ -868,9 +868,9 @@ If you appreciate our work, please consider donating. Even a small amount helps
868
868
869
869
[ 20220913 MevBot Private TX] ( past/2022/README.md#20220913-mevbot-private-tx )
870
870
871
- [ 20220910 DPC] ( past/2022/README.md#20220910 -dpc---Incorrect-Reward-calculation )
871
+ [ 20220909 DPC] ( past/2022/README.md#20220909 -dpc---Incorrect-Reward-calculation )
872
872
873
- [ 20220909 YYDS] ( past/2022/README.md#20220909 -YYDS---pair-manipulate )
873
+ [ 20220908 YYDS] ( past/2022/README.md#20220908 -YYDS---pair-manipulate )
874
874
875
875
[ 20220908 NewFreeDAO] ( past/2022/README.md#20220908-newfreedao---flashloans-attack )
876
876
@@ -898,7 +898,7 @@ If you appreciate our work, please consider donating. Even a small amount helps
898
898
899
899
[ 20220807 EGD Finance] ( past/2022/README.md#20220807-egd-finance---flashloans--price-manipulation )
900
900
901
- [ 20220804 EtnProcudt ] ( past/2022/README.md#20220804-etnprocudt ---business-logic-flaw )
901
+ [ 20220804 EtnProduct ] ( past/2022/README.md#20220804-etnproduct ---business-logic-flaw )
902
902
903
903
[ 20220803 Qixi] ( past/2022/README.md#20220803-qixi---underflow )
904
904
@@ -978,7 +978,7 @@ If you appreciate our work, please consider donating. Even a small amount helps
978
978
979
979
[ 20220320 Umbrella Network] ( past/2022/README.md#20220320-umbrella-network---underflow )
980
980
981
- [ 20220315 Agave Finance] ( past/2022/README.md#20220313 -agave-finance---erc667-reentrancy )
981
+ [ 20220315 Agave Finance] ( past/2022/README.md#20220315 -agave-finance---erc667-reentrancy )
982
982
983
983
[ 20220315 Hundred Finance] ( past/2022/README.md#20220313-hundred-finance---erc667-reentrancy )
984
984
@@ -2446,7 +2446,7 @@ https://twitter.com/0xNickLFranklin/status/1775008489569718508
2446
2446
2447
2447
---
2448
2448
2449
- ### 20240401 OpenLeverage - Reentrancy
2449
+ ### 20240401 OpenLeverage - business logic flaw
2450
2450
2451
2451
### Lost: ~ 234K
2452
2452
@@ -2464,7 +2464,7 @@ https://twitter.com/0xNickLFranklin/status/1774727539975672136
2464
2464
2465
2465
---
2466
2466
2467
- ### 20240329 ETHFIN - Price Manipulation
2467
+ ### 20240329 ETHFIN - lack of access control
2468
2468
2469
2469
### Lost: ~ $1.24K (2.13 BNB)
2470
2470
@@ -2473,7 +2473,9 @@ https://twitter.com/0xNickLFranklin/status/1774727539975672136
2473
2473
forge test --contracts ./src/test/2024-03/ETHFIN_exp.sol -vvv --evm-version shanghai
2474
2474
```
2475
2475
#### Contract
2476
+
2476
2477
[ ETHFIN_exp.sol] ( src/test/2024-03/ETHFIN_exp.sol )
2478
+
2477
2479
### Link reference
2478
2480
2479
2481
https://app.blocksec.com/explorer/tx/bsc/0xfe031685d84f3bae1785f5b2bd0ed480b87815c3f23ce6ced73b8573b7e367c6
@@ -3013,7 +3015,7 @@ https://medium.com/@lunaray/dualpools-hack-analysis-5209233801fa
3013
3015
3014
3016
---
3015
3017
3016
- ### 20240215 Babyloogn - reentrancy
3018
+ ### 20240215 Babyloogn - lack of validation
3017
3019
3018
3020
### Lost: ~ 2 $BNB
3019
3021
@@ -3058,7 +3060,9 @@ https://twitter.com/Phalcon_xyz/status/1757777340002681326
3058
3060
forge test --contracts ./src/test/2024-02/MINER_bsc_exp.sol -vvv --evm-version shanghai
3059
3061
```
3060
3062
#### Contract
3063
+
3061
3064
[ MINER_bsc_exp.sol] ( src/test/2024-02/MINER_bsc_exp.sol )
3065
+
3062
3066
### Link reference
3063
3067
3064
3068
https://app.blocksec.com/explorer/tx/bsc/0x15ab671c9bf918fa4b6a9eed9ccb527f32aca40e926ede2aec2c84dfa9c30512?line=6
@@ -3215,7 +3219,7 @@ https://phalcon.blocksec.com/explorer/security-incidents
3215
3219
3216
3220
---
3217
3221
3218
- ### 20240129 PeapodsFinance_exp - Reentrancy
3222
+ ### 20240129 PeapodsFinance - Reentrancy
3219
3223
3220
3224
### Lost: ~ 1K $DAI
3221
3225
@@ -3329,7 +3333,7 @@ https://x.com/0xmstore/status/1747756898172952725
3329
3333
3330
3334
---
3331
3335
3332
- ### 20240115 Shell_MEV_0xa898 - loss of precision
3336
+ ### 20240115 Shell_MEV_0xa898 - lack of access control
3333
3337
3334
3338
### Lost: ~ 1K $BUSD
3335
3339
@@ -3385,7 +3389,7 @@ https://twitter.com/danielvf/status/1746303616778981402
3385
3389
3386
3390
---
3387
3391
3388
- ### 20240110 Freedom - Loss of Precision
3392
+ ### 20240110 Freedom - lack of access control
3389
3393
3390
3394
### Lost: 74 $WBNB
3391
3395
@@ -3395,7 +3399,7 @@ forge test --contracts src/test/2024-01/Freedom_exp.sol -vvv
3395
3399
3396
3400
#### Contract
3397
3401
3398
- [ Freedom_exp.sol] ( src/test/2024-01/Freedom_exp_exp .sol )
3402
+ [ Freedom_exp.sol] ( src/test/2024-01/Freedom_exp .sol )
3399
3403
3400
3404
#### Link reference
3401
3405
0 commit comments