Skip to content

Commit 8e58773

Browse files
committedSep 22, 2024
update README
1 parent e151bbf commit 8e58773

File tree

3 files changed

+68
-49
lines changed

3 files changed

+68
-49
lines changed
 

‎README.md

+24-20
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
**Reproduce DeFi hack incidents using Foundry.**
44

5-
522 incidents included.
5+
523 incidents included.
66

77
Let's make Web3 secure! Join [Discord](https://discord.gg/Fjyngakf3h)
88

@@ -196,9 +196,9 @@ If you appreciate our work, please consider donating. Even a small amount helps
196196

197197
[20240401 ATM](#20240401-atm---business-logic-flaw)
198198

199-
[20240401 OpenLeverage](#20240401-openleverage---reentrancy)
199+
[20240401 OpenLeverage](#20240401-openleverage---business-logic-flaw)
200200

201-
[20240329 ETHFIN](#20240329-ethfin---price-manipulation)
201+
[20240329 ETHFIN](#20240329-ethfin---lack-of-access-control)
202202

203203
[20240329 PrismaFi](#20240329-prismaFi---insufficient-validation)
204204

@@ -258,7 +258,7 @@ If you appreciate our work, please consider donating. Even a small amount helps
258258

259259
[20240215 DualPools](#20240215-DualPools---precision-truncation)
260260

261-
[20240215 Babyloogn](#20240215-Babyloogn---reentrancy)
261+
[20240215 Babyloogn](#20240215-Babyloogn---lack-of-validation)
262262

263263
[20240215 Miner](#20240215-Miner---lack-of-validation-dst-address)
264264

@@ -294,11 +294,11 @@ If you appreciate our work, please consider donating. Even a small amount helps
294294

295295
[20240117 SocketGateway](#20240112-socketgateway---lack-of-calldata-validation)
296296

297-
[20240115 Shell_MEV_0xa898](#20240115-Shell_MEV_0xa898---loss-of-precision)
297+
[20240115 Shell_MEV_0xa898](#20240115-Shell_MEV_0xa898---lack-of-access-control)
298298

299299
[20240112 WiseLending](#20240112-wiselending---bad-healthfactor-check)
300300

301-
[20240110 Freedom](#20240110-Freedom---loss-of-precision)
301+
[20240110 Freedom](#20240110-Freedom---lack-of-access-control)
302302

303303
[20240110 LQDX Alert](#20240110-lqdx---unauthorized-transferfrom)
304304

@@ -556,13 +556,13 @@ If you appreciate our work, please consider donating. Even a small amount helps
556556

557557
[20230630 Biswap](past/2023/README.md#20230630-biswap---v3migrator-exploit)
558558

559-
[20230630 MyAi](#20230630-MyAi---business-loigc)
559+
[20230630 MyAi](past/2023/README.md#20230630-MyAi---business-loigc)
560560

561561
[20230628 Themis](past/2023/README.md#20230628-themis---manipulation-of-prices-using-flashloan)
562562

563563
[20230627 UnverifiedContr_9ad32](past/2023/README.md#20230627-unverifiedcontr_9ad32---business-loigc-flaw)
564564

565-
[20230627 STRAC](#20230627-STRAC---business-loigc)
565+
[20230627 STRAC](past/2023/README.md#20230627-STRAC---business-loigc)
566566

567567
[20230623 SHIDO](past/2023/README.md#20230623-shido---business-loigc)
568568

@@ -762,7 +762,7 @@ If you appreciate our work, please consider donating. Even a small amount helps
762762

763763
[20221211 Lodestar](past/2022/README.md#20221211---lodestar---flashloan-price-manipulation)
764764

765-
[20221211 MEVbot_0x28d9](past/2022/README.md#20221211---MEVbot_0x28d9---precision-loss)
765+
[20221211 MEVbot_0x28d9](past/2022/README.md#20221211---MEVbot_0x28d9---insufficient-validation)
766766

767767
[20221210 MUMUG](past/2022/README.md#20221210---mumug---flashloan-price-manipulation)
768768

@@ -868,9 +868,9 @@ If you appreciate our work, please consider donating. Even a small amount helps
868868

869869
[20220913 MevBot Private TX](past/2022/README.md#20220913-mevbot-private-tx)
870870

871-
[20220910 DPC](past/2022/README.md#20220910-dpc---Incorrect-Reward-calculation)
871+
[20220909 DPC](past/2022/README.md#20220909-dpc---Incorrect-Reward-calculation)
872872

873-
[20220909 YYDS](past/2022/README.md#20220909-YYDS---pair-manipulate)
873+
[20220908 YYDS](past/2022/README.md#20220908-YYDS---pair-manipulate)
874874

875875
[20220908 NewFreeDAO](past/2022/README.md#20220908-newfreedao---flashloans-attack)
876876

@@ -898,7 +898,7 @@ If you appreciate our work, please consider donating. Even a small amount helps
898898

899899
[20220807 EGD Finance](past/2022/README.md#20220807-egd-finance---flashloans--price-manipulation)
900900

901-
[20220804 EtnProcudt](past/2022/README.md#20220804-etnprocudt---business-logic-flaw)
901+
[20220804 EtnProduct](past/2022/README.md#20220804-etnproduct---business-logic-flaw)
902902

903903
[20220803 Qixi](past/2022/README.md#20220803-qixi---underflow)
904904

@@ -978,7 +978,7 @@ If you appreciate our work, please consider donating. Even a small amount helps
978978

979979
[20220320 Umbrella Network](past/2022/README.md#20220320-umbrella-network---underflow)
980980

981-
[20220315 Agave Finance](past/2022/README.md#20220313-agave-finance---erc667-reentrancy)
981+
[20220315 Agave Finance](past/2022/README.md#20220315-agave-finance---erc667-reentrancy)
982982

983983
[20220315 Hundred Finance](past/2022/README.md#20220313-hundred-finance---erc667-reentrancy)
984984

@@ -2446,7 +2446,7 @@ https://twitter.com/0xNickLFranklin/status/1775008489569718508
24462446

24472447
---
24482448

2449-
### 20240401 OpenLeverage - Reentrancy
2449+
### 20240401 OpenLeverage - business logic flaw
24502450

24512451
### Lost: ~234K
24522452

@@ -2464,7 +2464,7 @@ https://twitter.com/0xNickLFranklin/status/1774727539975672136
24642464

24652465
---
24662466

2467-
### 20240329 ETHFIN - Price Manipulation
2467+
### 20240329 ETHFIN - lack of access control
24682468

24692469
### Lost: ~$1.24K (2.13 BNB)
24702470

@@ -2473,7 +2473,9 @@ https://twitter.com/0xNickLFranklin/status/1774727539975672136
24732473
forge test --contracts ./src/test/2024-03/ETHFIN_exp.sol -vvv --evm-version shanghai
24742474
```
24752475
#### Contract
2476+
24762477
[ETHFIN_exp.sol](src/test/2024-03/ETHFIN_exp.sol)
2478+
24772479
### Link reference
24782480

24792481
https://app.blocksec.com/explorer/tx/bsc/0xfe031685d84f3bae1785f5b2bd0ed480b87815c3f23ce6ced73b8573b7e367c6
@@ -3013,7 +3015,7 @@ https://medium.com/@lunaray/dualpools-hack-analysis-5209233801fa
30133015

30143016
---
30153017

3016-
### 20240215 Babyloogn - reentrancy
3018+
### 20240215 Babyloogn - lack of validation
30173019

30183020
### Lost: ~2 $BNB
30193021

@@ -3058,7 +3060,9 @@ https://twitter.com/Phalcon_xyz/status/1757777340002681326
30583060
forge test --contracts ./src/test/2024-02/MINER_bsc_exp.sol -vvv --evm-version shanghai
30593061
```
30603062
#### Contract
3063+
30613064
[MINER_bsc_exp.sol](src/test/2024-02/MINER_bsc_exp.sol)
3065+
30623066
### Link reference
30633067

30643068
https://app.blocksec.com/explorer/tx/bsc/0x15ab671c9bf918fa4b6a9eed9ccb527f32aca40e926ede2aec2c84dfa9c30512?line=6
@@ -3215,7 +3219,7 @@ https://phalcon.blocksec.com/explorer/security-incidents
32153219

32163220
---
32173221

3218-
### 20240129 PeapodsFinance_exp - Reentrancy
3222+
### 20240129 PeapodsFinance - Reentrancy
32193223

32203224
### Lost: ~1K $DAI
32213225

@@ -3329,7 +3333,7 @@ https://x.com/0xmstore/status/1747756898172952725
33293333

33303334
---
33313335

3332-
### 20240115 Shell_MEV_0xa898 - loss of precision
3336+
### 20240115 Shell_MEV_0xa898 - lack of access control
33333337

33343338
### Lost: ~1K $BUSD
33353339

@@ -3385,7 +3389,7 @@ https://twitter.com/danielvf/status/1746303616778981402
33853389

33863390
---
33873391

3388-
### 20240110 Freedom - Loss of Precision
3392+
### 20240110 Freedom - lack of access control
33893393

33903394
### Lost: 74 $WBNB
33913395

@@ -3395,7 +3399,7 @@ forge test --contracts src/test/2024-01/Freedom_exp.sol -vvv
33953399

33963400
#### Contract
33973401

3398-
[Freedom_exp.sol](src/test/2024-01/Freedom_exp_exp.sol)
3402+
[Freedom_exp.sol](src/test/2024-01/Freedom_exp.sol)
33993403

34003404
#### Link reference
34013405

‎past/2022/README.md

+17-13
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
## 2022 - List of Past DeFi Incidents
44

5-
127 incidents included.
5+
129 incidents included.
66

77
[20221230 DFS](#20221230---dfs---insufficient-validation--flashloan)
88

@@ -22,7 +22,7 @@
2222

2323
[20221211 Lodestar](#20221211---lodestar---flashloan-price-manipulation)
2424

25-
[20221211 MEVbot_0x28d9](#20221211---MEVbot_0x28d9---precision-loss)
25+
[20221211 MEVbot_0x28d9](#20221211---MEVbot_0x28d9---insufficient-validation)
2626

2727
[20221210 MUMUG](#20221210---mumug---flashloan-price-manipulation)
2828

@@ -52,7 +52,7 @@
5252

5353
[20221119 AnnexFinance](#20221119---annexfinance---verify-flashloan-callback)
5454

55-
[20221118 Polynomial](#20221118---Polynomial---no-input-validation)
55+
[20221118 Polynomial](#20221118---polynomial---no-input-validation)
5656

5757
[20221117 UEarnPool](#20221117---uearnpool---flashloan-attack)
5858

@@ -128,9 +128,9 @@
128128

129129
[20220913 MevBot Private TX](#20220913-mevbot-private-tx)
130130

131-
[20220910 DPC](#20220910-dpc---Incorrect-Reward-calculation)
131+
[20220909 DPC](#20220909-dpc---Incorrect-Reward-calculation)
132132

133-
[20220909 YYDS](#20220909-YYDS---pair-manipulate)
133+
[20220908 YYDS](#20220908-YYDS---pair-manipulate)
134134

135135
[20220908 NewFreeDAO](#20220908-newfreedao---flashloans-attack)
136136

@@ -148,15 +148,19 @@
148148

149149
[20220824 LuckyTiger NFT](#20220824-luckytiger-nft---predicting-random-numbers)
150150

151+
[20220816 Circle_2](#20220816-circle---price-manipulation)
152+
153+
[20220813 Circle](#20220813-circle---price-manipulation)
154+
151155
[20220810 XSTABLE Protocol](#20220810-xstable-protocol---incorrect-logic-check)
152156

153157
[20220809 ANCH](#20220809-anch---skim-token-balance)
154158

155159
[20220807 EGD Finance](#20220807-egd-finance---flashloans--price-manipulation)
156160

157-
[20220804 EtnProcudt](#20220804-etnprocudt---business-logic-flaw)
161+
[20220804 EtnProduct](#20220804-etnproduct---business-logic-flaw)
158162

159-
[20220803 Qixi](#20220803-Qixi---underflow)
163+
[20220803 Qixi](#20220803-qixi---underflow)
160164

161165
[20220802 Nomad Bridge](#20220802-nomad-bridge---business-logic-flaw--incorrect-acceptable-merkle-root-checks)
162166

@@ -234,7 +238,7 @@
234238

235239
[20220320 Umbrella Network](#20220320-umbrella-network---underflow)
236240

237-
[20220315 Agave Finance](#20220313-agave-finance---erc667-reentrancy)
241+
[20220315 Agave Finance](#20220315-agave-finance---erc667-reentrancy)
238242

239243
[20220315 Hundred Finance](#20220313-hundred-finance---erc667-reentrancy)
240244

@@ -444,7 +448,7 @@ https://blog.lodestarfinance.io/post-mortem-summary-13f5fe0bb336
444448

445449
---
446450

447-
### 20221211 - MEVbot_0x28d9 - Precision loss
451+
### 20221211 - MEVbot_0x28d9 - Insufficient validation
448452

449453
### Lost: $2k $USDT
450454

@@ -1882,19 +1886,19 @@ https://twitter.com/PeckShieldAlert/status/1556486817406283776
18821886

18831887
---
18841888

1885-
### 20220804 EtnProcudt - Business Logic Flaw
1889+
### 20220804 EtnProduct - Business Logic Flaw
18861890

18871891
#### Lost: 3074 USD
18881892

18891893
Testing
18901894

18911895
```sh
1892-
forge test --contracts ./src/test/2022-08/EtnProcudt_exp.sol -vvv
1896+
forge test --contracts ./src/test/2022-08/EtnProduct_exp.sol -vvv
18931897
```
18941898

18951899
#### Contract
18961900

1897-
[EtnProcudt_exp.sol](../../src/test/2022-08/EtnProcudt_exp.sol)
1901+
[EtnProcudt_exp.sol](../../src/test/2022-08/EtnProduct_exp.sol)
18981902

18991903
#### Link reference
19001904

@@ -2838,7 +2842,7 @@ https://gnosisscan.io/tx/0x534b84f657883ddc1b66a314e8b392feb35024afdec61dfe8e7c5
28382842

28392843
---
28402844

2841-
### 20220313 Agave Finance - ERC667 Reentrancy
2845+
### 20220315 Agave Finance - ERC667 Reentrancy
28422846

28432847
#### Lost: $1.5 million
28442848

0 commit comments

Comments
 (0)
Please sign in to comment.