README.md

# DeFi Hacks Reproduce - Foundry

**Reproduce DeFi hack incidents using Foundry.**

306 incidents included.

Let's make Web3 secure! Join [Discord](https://discord.gg/Fjyngakf3h)

Notion: [101 root cause analysis of past DeFi hacked incidents](https://web3sec.xrex.io/)

[Transaction debugging tools](https://github.com/SunWeb3Sec/DeFiHackLabs/#transaction-debugging-tools)

**Disclaimer:** This content serves solely as a proof of concept showcasing past DeFi hacking incidents. It is strictly intended for educational purposes and should not be interpreted as encouraging or endorsing any form of illegal activities or actual hacking attempts. The provided information is for informational and learning purposes only, and any actions taken based on this content are solely the responsibility of the individual. The usage of this information should adhere to applicable laws, regulations, and ethical standards.

## Getting Started

- Follow the [instructions](https://book.getfoundry.sh/getting-started/installation.html) to install [Foundry](https://github.com/foundry-rs/foundry).

- Clone and install dependencies:`git submodule update --init --recursive`

## [Web3 Cybersecurity Academy](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy)

All articles are also published on [Substack](https://defihacklabs.substack.com/).

### OnChain transaction debugging (Ongoing)

- Lesson 1: Tools ( [English](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/01_tools/en) | [中文](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/01_tools) | [Vietnamese](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/01_tools/vi) | [Korean](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/01_tools/ko) )
- Lesson 2: Warm up ( [English](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/02_warmup/en/) | [中文](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/02_warmup/) | [Korean](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/02_warmup/ko) )
- Lesson 3: Write Your Own PoC (Price Oracle Manipulation) ( [English](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/03_write_your_own_poc/en/) | [中文](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/03_write_your_own_poc/) | [Korean](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/03_write_your_own_poc/ko) )
- Lesson 4: Write Your Own PoC (MEV Bot) ( [English](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/04_write_your_own_poc/en/) | [中文](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/04_write_your_own_poc/) | [Korean](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/04_write_your_own_poc/kr/) )
- Lesson 5: Rugpull Analysis ( [English](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/05_Rugpull/en/) | [中文](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/05_Rugpull/) )
- Lesson 6: Write Your Own PoC (Reentrancy) ( [English](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/06_write_your_own_poc/en/) | [中文](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/06_write_your_own_poc/) )
- Lesson 7: Hack Analysis: Nomad Bridge, August 2022 ( [English](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/07_Analysis_nomad_bridge/en/) | [中文](https://github.com/SunWeb3Sec/DeFiHackLabs/tree/main/academy/onchain_debug/07_Analysis_nomad_bridge/) )

## List of Past DeFi Incidents

[20231024 MaestroRouter2](#20231024-maestrorouter2---arbitrary-external-call)

[20231022 OpenLeverage](#20231022-openleverage---business-logic-flaw)

[20231019 kTAF](#20231019-ktaf---compoundv2-inflation-attack)

[20231018 MicDao](#20231018-micdao---price-manipulation)

[20231013 BelugaDex](#20231013-belugadex---price-manipulation)

[20231013 WiseLending](#20231013-wiselending---donate-inflation-exchangerate--rounding-error)

[20231012 Platypus](#20231012-platypus---business-logic-flaw)

[20231011 BH](#20231011-bh---price-manipulation)

[20231008 pSeudoEth](#20231008-pseudoeth---pool-manipulation)

[20231007 StarsArena](#20231007-starsarena---reentrancy)

[20231005 DePayRouter](#20231005-depayrouter---business-logic-flaw)

[20230930 FireBirdPair](#20230930-FireBirdPair---lack-slippage-protection)

[20230929 DEXRouter](#20230929-dexrouter---arbitrary-external-call)

[20230927 XSDWETHpool](#20230927-XSDWETHpool---reentrancy)

[20230924 KubSplit](#20230924-kubsplit---pool-manipulation)

[20230921 CEXISWAP](#20230921-cexiswap---incorrect-access-control)

[20230916 uniclyNFT](#20230916-uniclynft---reentrancy)

[20230911 0x0DEX](#20230911-0x0dex---parameter-manipulation)

[20230909 BFCToken](#20230909-bfctoken---business-logic-flaw)

[20230908 APIG](#20230908-apig---business-logic-flaw)

[20230907 HCT](#20230907-hct---price-manipulation)

[20230905 JumpFarm](#20230905-JumpFarm---rebasing-logic-issue)

[20230905 HeavensGate](#20230905-HeavensGate---rebasing-logic-issue)

[20230905 FloorDAO](#20230905-floordao---rebasing-logic-issue)

[20230902 DAppSocial](#20230902-dappsocial---business-logic-flaw)

[20230829 EAC](#20230829-eac---price-manipulation)

[20230827 Balancer](#20230827-balancer---rounding-error--business-logic-flaw)

[20230826 SVT](#20230826-svt---flawed-price-calculation)

[20230824 GSS](#20230824-gss---skim-token-balance)

[20230821 EHIVE](#20230821-ehive---business-logic-flaw)

[20230819 BTC20](#20230819-btc20---price-manipulation)

[20230818 ExactlyProtocol](#20230818-exactlyprotocol---insufficient-validation)

[20230814 ZunamiProtocol](#20230814-zunamiprotocol---price-manipulation)

[20230809 EarningFram](#20230809-earningfram---reentrancy)

[20230802 CurveBurner](#20230802-curveburner---lack-slippage-protection)

[20230802 Uwerx](#20230802-uwerx---fault-logic)

[20230801 NeutraFinance](#20230801-neutrafinance---price-manipulation)

[20230801 LeetSwap](#20230801-leetswap---access-control)

[20230731 GYMNET](#20230731-gymnet---insufficient-validation)

[20230730 Curve](#20230730-curve---vyper-compiler-bug--reentrancy)

[20230726 Carson](#20230726-carson---price-manipulation)

[20230724 Palmswap](#20230724-palmswap---business-logic-flaw)

[20230723 MintoFinance](#20230723-mintofinance---signature-replay)

[20230722 ConicFinance02](#20230722-conic-finance-02---price-manipulation)

[20230721 ConicFinance](#20230721-conic-finance---read-only-reentrancy--misconfiguration)

[20230721 SUT](#20230721-sut---business-logic-flaw)

[20230720 Utopia](#20230720-utopia---business-logic-flaw)

[20230720 FFIST](#20230720-ffist---business-logic-flaw)

[20230718 APEDAO](#20230718-apedao---business-logic-flaw)

[20230718 BNO](#20230718-bno---invalid-emergency-withdraw-mechanism)

[20230717 NewFi](#20230717-newfi---lack-slippage-protection)

[20230712 Platypus](#20230712-platypus---bussiness-logic-flaw)

[20230712 WGPT](#20230712-wgpt---business-logic-flaw)

[20230711 RodeoFinance](#20230711-rodeofinance---twap-oracle-manipulation)

[20230711 Libertify](#20230711-libertify---reentrancy)

[20230710 ArcadiaFi](#20230710-arcadiafi---reentrancy)

[20230708 CIVNFT](#20230708-civnft---lack-of-access-control)

[20230708 Civfund](#20230708-civfund---lack-of-access-control)

[20230707 LUSD](#20230707-LUSD---price-manipulation-attack)

[20230704 BambooIA](#20230704-bambooia---price-manipulation-attack)

[20230704 BaoCommunity](#20230704-baocommunity---donate-inflation-exchangerate--rounding-error)

[20230703 AzukiDAO](#20230703-azukidao---invalid-signature-verification)

[20230630 Biswap](#20230630-biswap---v3migrator-exploit)

[20230628 Themis](#20230628-themis---manipulation-of-prices-using-flashloan)

[20230624 SHIDO](#20230624-shido---business-loigc--arbitrage)

[20230623 ShidoGlobal](#20230623-shidoglobal---flashloan-attack)

[20230621 BabyDogeCoin02](#20230621-babydogecoin02---lack-slippage-protection)

[20230621 BUNN](#20230621-bunn---reflection-tokens)

[20230620 MIM](#20230620-mimspell---arbitrary-external-call-vulnerability)

[20230618 ARA](#20230618-ara---incorrect-handling-of-permissions)

[20230617 Pawnfi](#20230617-pawnfi---business-logic-flaw)

[20230615 CFC](#20230615-cfc---uniswap-skim-token-balance-attack)

[20230615 DEPUSDT_LEVUSDC](#20230615-depusdt_levusdc---incorrect-access-control)

[20230612 Sturdy Finance](#20230612-sturdy-finance---read-only-reentrancy)

[20230611 SellToken04](#20230611-sellToken04---Price-Manipulation)

[20230607 CompounderFinance](#20230607-compounderfinance---manipulation-of-funds-through-fluctuations-in-the-amount-of-exchangeable-assets)

[20230606 VINU](#20230606-vinu---price-manipulation)

[20230606 UN](#20230606-un---price-manipulation)

[20230602 NST SimpleSwap](#20230602-nst-simple-swap---unverified-contract-wrong-approval)

[20230601 DDCoin](#20230601-ddcoin---flashloan-attack-and-smart-contract-vulnerability)

[20230601 Cellframenet](#20230601-cellframenet---calculation-issues-during-liquidity-migration)

[20230531 ERC20TokenBank](#20230531-erc20tokenbank---price-manipulation)

[20230529 Jimbo](#20230529-jimbo---protocol-specific-price-manipulation)

[20230529 BabyDogeCoin](#20230529-babydogecoin---lack-slippage-protection)

[20230529 FAPEN](#20230529-fapen---wrong-balance-check)

[20230529 NOON_NO](#20230529-noon-no---wrong-visibility-in-function)

[20230525 GPT](#20230525-gpt-token---fee-machenism-exploitation)

[20230524 LocalTrade](#20230524-local-trade-lct---inproper-access-control-of-close-source-contract)

[20230524 CS](#20230524-cs-token---outdated-global-variable)

[20230523 LFI](#20230523-lfi-token---business-logic-flaw)

[20230514 landNFT](#20230514-landNFT---lack-of-permission-control)

[20230514 SellToken03](#20230514-selltoken03---unchecked-user-input)

[20230513 Bitpaidio](#20230513-bitpaidio---business-logic-flaw)

[20230513 SellToken02](#20230513-selltoken02---price-manipulation)

[20230512 LW](#20230512-lw---flashloan-price-manipulation)

[20230511 SellToken01](#20230511-selltoken01---business-logic-flaw)

[20230510 SNK](#20230510-snk---reward-calculation-error)

[20230506 Melo](#20230506-melo---access-control)

[20230505 DEI](#20230505-dei---wrong-implemention)

[20230503 NeverFall](#20230503-NeverFall---price-manipulation)

[20230502 Level](#20230502-level---business-logic-flaw)

[20230428 0vix](#20230428-0vix---flashloan-price-manipulation)

[20230427 SiloFinance](#20230427-Silo-finance---Business-Logic-Flaw)

[20230424 Axioma](#20230424-Axioma---business-logic-flaw)

[20230419 OLIFE](#20230419-OLIFE----Reflection-token)

[20230416 Swapos V2](#20230416-swapos-v2----error-k-value-attack)

[20230415 HundredFinance](#20230415-hundredfinance---donate-inflation-exchangerate--rounding-error)

[20230413 yearnFinance](#20230413-yearnFinance---misconfiguration)

[20230412 MetaPoint](#20230412-metapoint---Unrestricted-Approval)

[20230411 Paribus](#20230411-paribus---reentrancy)

[20230409 SushiSwap](#20230409-SushiSwap---Unchecked-User-Input)

[20230405 Sentiment](#20230405-sentiment---read-only-reentrancy)

[20230402 Allbridge](#20230402-allbridge---flashloan-price-manipulation)

[20230328 SafeMoon Hack](#20230328-safemoon-hack)

[20230328 THENA](#20230328---thena---yield-protocol-flaw)

[20230325 DBW](#20230325---dbw--business-logic-flaw)

[20230322 BIGFI](#20230322---bigfi---reflection-token)

[20230317 ParaSpace NFT](#20230317---paraspace-nft---flashloan--scaledbalanceof-manipulation)

[20230315 Poolz](#20230315---poolz---integer-overflow)

[20230313 EulerFinance](#20230313---eulerfinance---business-logic-flaw)

[20230308 DKP](#20230308---dkp---flashloan-price-manipulation)

[20230307 Phoenix](#20230307---phoenix---access-control--arbitrary-external-call)

[20230227 LaunchZone](#20230227---launchzone---access-control)

[20230227 SwapX](#20230227---swapx---access-control)

[20230224 EFVault](#20230224---efvault---storage-collision)

[20230222 DYNA](#20230222---dyna---business-logic-flaw)

[20230218 RevertFinance](#20230218---revertfinance---arbitrary-external-call-vulnerability)

[20230217 Starlink](#20230217---starlink---business-logic-flaw)

[20230217 Dexible](#20230217---dexible---arbitrary-external-call-vulnerability)

[20230217 Platypusdefi](#20230217---platypusdefi---business-logic-flaw)

[20230210 Sheep Token](#20230210---sheep---reflection-token)

[20230210 dForce](#20230210---dforce---read-only-reentrancy)

[20230207 CowSwap](#20230207---cowswap---arbitrary-external-call-vulnerability)

[20230207 FDP Token](#20230207---fdp---reflection-token)

[20230203 Orion Protocol](#20230203---orion-protocol---reentrancy)

[20230203 Spherax USDs](#20230203---spherax-usds---balance-recalculation-bug)

[20230202 BonqDAO](#20230202---BonqDAO---price-oracle-manipulation)

[20230126 TomInu Token](#20230126---tinu---reflection-token)

[20230119 ThoreumFinance](#20230119---thoreumfinance-business-logic-flaw)

[20230118 QTN Token](#20230118---qtntoken---business-logic-flaw)

[20230118 UPS Token](#20230118---upstoken---business-logic-flaw)

[20230117 OmniEstate](#20230117---OmniEstate---no-input-parameter-check)

[20230116 MidasCapital](#20230116---midascapital---read-only-reentrancy)

[20230112 UFDao](#20230112---ufdao---incorrect-parameter-setting)

[20230112 ROE](#20230112---roefinance---flashloan-price-manipulation)

[20230110 BRA](#20230110---bra---business-logic-flaw)

[20230103 GDS](#20230103---gds---business-logic-flaw)

<details> <summary> 2022 </summary>

[20221230 DFS](#20221230---dfs---insufficient-validation--flashloan)

[20221229 JAY](#20221229---jay---insufficient-validation--reentrancy)

[20221225 Rubic](#20221225---rubic---arbitrary-external-call-vulnerability)

[20221223 Defrost](#20221223---defrost---reentrancy)

[20221214 Nmbplatform](#20221214---nmbplatform---flashloan-price-manipulation)

[20221214 FPR](#20221214---fpr---access-control)

[20221213 ElasticSwap](#20221213---elasticswap---business-logic-flaw)

[20221212 BGLD](#20221212---bgld-deflationary-token---flashloan-price-manipulation)

[20221211 Lodestar](#20221211---lodestar---flashloan-price-manipulation)

[20221210 MUMUG](#20221210---mumug---flashloan-price-manipulation)

[20221210 TIFIToken](#20221210---tifitoken---flashloan-price-manipulation)

[20221209 NOVAToken](#20221209---novatoken---malicious-unlimted-minting-rugged)

[20221207 AES](#20221207---aes-deflationary-token----business-logic-flaw--flashloan-price-manipulation)

[20221205 RFB](#20221205---rfb---predicting-random-numbers)

[20221205 BBOX](#20221205---bbox---flashloan-price-manipulation)

[20221202 OverNight](#20221202---overnight---flashloan-attack)

[20221201 APC](#20221201---apc---flashloan--price-manipulation)

[20221129 MBC & ZZSH](#20221129---mbc--zzsh---business-logic-flaw--access-control)

[20221129 SEAMAN](#20221129---seaman---business-logic-flaw)

[20221123 NUM](#20221123---num---protocol-token-incompatible)

[20221122 AUR](#20221122---aur---lack-of-permission-check)

[20221121 SDAO](#20221121---sdao---business-logic-flaw)

[20221119 AnnexFinance](#20221119---annexfinance---verify-flashloan-callback)

[20221117 UEarnPool](#20221117---uearnpool---flashloan-attack)

[20221116 SheepFarm](#20221116---sheepfarm---no-input-validation)

[20221110 DFXFinance](#20221110---dfxfinance---reentrancy)

[20221109 brahTOPG](#20221109-brahtopg---arbitrary-external-call-vulnerability)

[20221108 MEV_0ad8](#20221108-mev_0ad8---arbitrary-call)

[20221108 Kashi](#20221108-kashi---price-caching-design-defect)

[20221107 MooCAKECTX](#20221107-moocakectx---flashloan-attack)

[20221105 BDEX](#20221105-bdex---business-logic-flaw)

[20221027 VTF](#20221027-vtf-token---incorrect-reward-calculation)

[20221027 Team Finance](#20221027-team-finance---liquidity-migration-exploit)

[20221026 N00d Token](#20221026-n00d-token---reentrancy)

[20221025 ULME](#20221025-ulme---access-control)

[20221024 Market](#20221024-market---read-only-reentrancy)

[20221024 MulticallWithoutCheck](#20221024-multicallwithoutcheck---arbitrary-external-call-vulnerability)

[20221021 OlympusDAO](#20221021-olympusdao---no-input-validation)

[20221020 HEALTH Token](#20221020-health---transfer-logic-flaw)

[20221020 BEGO Token](#20221020-bego---incorrect-signature-verification)

[20221018 HPAY](#20221018-hpay---access-control)

[20221018 PLTD Token](#20221018-pltd---transfer-logic-flaw)

[20221017 Uerii Token](#20221017-uerii-token---access-control)

[20221014 INUKO Token](#20221014-inuko---flashloan-price-manipulation)

[20221014 EFLeverVault](#20221014-eflevervault---verify-flashloan-callback)

[20221014 MEVBOT a47b](#20221014-mevbota47b---mevbot-a47b)

[20221012 ATK](#20221012-atk---flashloan-manipulate-price)

[20221011 Rabby Wallet SwapRouter](#20221011-rabby-wallet-swaprouter---arbitrary-external-call-vulnerability)

[20221011 Templedao](#20221011-templedao---insufficient-access-control)

[20221010 Carrot](#20221010-carrot---public-functioncall)

[20221009 Xave Finance](#20221009-xave-finance---malicious-proposal-mint--transfer-ownership)

[20221006 RES-Token](#20221006-RES-Token---pair-manipulate)

[20221002 Transit Swap](#20221002-transit-swap---incorrect-owner-address-validation)

[20221001 BabySwap](#20221001-babyswap---parameter-access-control)

[20221001 RL](#20221001-RL-Token---Incorrect-Reward-calculation)

[20221001 Thunder Brawl](#20221001-thunder-brawl---reentrancy)

[20220929 BXH](#20220928-bxh---flashloan--price-oracle-manipulation)

[20220928 MEVBOT Badc0de](#20220928-MEVBOT---Badc0de)

[20220923 RADT-DAO](#20220923-RADT-DAO---pair-manipulate)

[20220913 MevBot Private TX](#20220913-mevbot-private-tx)

[20220910 DPC](#20220910-dpc---Incorrect-Reward-calculation)

[20220909 YYDS](#20220909-YYDS---pair-manipulate)

[20220908 NewFreeDAO](#20220908-newfreedao---flashloans-attack)

[20220908 Ragnarok Online Invasion](#20220908-ragnarok-online-invasion---broken-access-control)

[20220906 NXUSD](#20220906-NXUSD---flashloan-price-oracle-manipulation)

[20220905 ZoomproFinance](#20220905-zoomprofinance---flashloans--price-manipulation)

[20220902 ShadowFi](#20220902-shadowfi---access-control)

[20220902 Bad Guys by RPF](#20220902-bad-guys-by-rpf---business-logic-flaw--missing-check-for-number-of-nft-to-mint)

[20220824 LuckyTiger NFT](#20220824-luckytiger-nft---predicting-random-numbers)

[20220810 XSTABLE Protocol](#20220810-xstable-protocol---incorrect-logic-check)

[20220809 ANCH](#20220809-anch---skim-token-balance)

[20220807 EGD Finance](#20220807-egd-finance---flashloans--price-manipulation)

[20220802 Nomad Bridge](#20220802-nomad-bridge---business-logic-flaw--incorrect-acceptable-merkle-root-checks)

[20220801 Reaper Farm](#20220801-reaper-farm---business-logic-flaw--lack-of-access-control-mechanism)

[20220725 LPC](#20220725-lpc---business-logic-flaw--incorrect-recipient-balance-check-did-not-check-senderrecipient-in-transfer)

[20220713 Audius](#20220723-audius---storage-collision--malicious-proposal)

[20220713 SpaceGodzilla](#20220713-spacegodzilla---flashloans--price-manipulation)

[20220710 Omni NFT](#20220710-omni-nft---reentrancy)

[20220706 FlippazOne NFT](#20220706-flippazone-nft----accesscontrol)

[20220701 Quixotic - Optimism NFT Marketplace](#20220701-quixotic---optimism-nft-marketplace)

[20220626 XCarnival](#20220626-xcarnival---infinite-number-of-loans)

[20220624 Harmony's Horizon Bridge](#20220624-harmonys-horizon-bridge---private-key-compromised)

[20220618 SNOOD](#20220618-snood---miscalculation-on-_spendallowance)

[20220616 InverseFinance](#20220616-inversefinance---flashloan--price-oracle-manipulation)

[20220608 GYMNetwork](#20220608-gymnetwork---accesscontrol)

[20220608 Optimism - Wintermute](#20220608-optimism---wintermute)

[20220606 Discover](#20220606-discover---flashloan--price-oracle-manipulation)

[20220529 NOVO Protocol](#20220529-novo-protocol---flashloan--price-oracle-manipulation)

[20220524 HackDao](#20220524-HackDao---Skim-token-balance)

[20220517 ApeCoin](#20220517-apecoin-ape---flashloan)

[20220508 Fortress Loans](#20220508-fortress-loans---malicious-proposal--price-oracle-manipulation)

[20220430 Saddle Finance](#20220430-saddle-finance---swap-metapool-attack)

[20220430 Rari Capital/Fei Protocol](#20220430-rari-capitalfei-protocol---flashloan-attack--reentrancy)

[20220428 DEUS DAO](#20220428-deus-dao---flashloan--price-oracle-manipulation)

[20220424 Wiener DOGE](#20220424-wiener-doge---flashloan)

[20220423 Akutar NFT](#20220423-akutar-nft---denial-of-service)

[20220421 Zeed Finance](#20220421-zeed-finance)

[20220416 BeanstalkFarms](#20220416-beanstalkfarms---dao--flashloan)

[20220415 Rikkei Finance](#20220415-rikkei-finance---accesscontrol--price-oracle-manipulation)

[20220412 ElephantMoney](#20220412-elephantmoney---flashloan--price-oracle-manipulation)

[20220411 Creat Future](#20220411-creat-future)

[20220409 GYMNetwork](#20220409-gymnetwork)

[20220329 Ronin Network](#20220329-ronin-network---Bridge)

[20220329 Redacted Cartel](#20220329-redacted-cartel---custom-approval-logic)

[20220327 Revest Finance](#20220327-revest-finance---reentrancy)

[20220326 Auctus](#20220326-auctus)

[20220322 CompoundTUSDSweepTokenBypass](#20220322-compoundtusdsweeptokenbypass)

[20220321 OneRing Finance](#20220321-onering-finance---flashloan--price-oracle-manipulation)

[20220320 LI.FI](#20220320-LiFi---bridges)

[20220320 Umbrella Network](#20220320-umbrella-network---underflow)

[20220315 Hundred Finance](#20220313-hundred-finance---erc667-reentrancy)

[20220313 Paraluni](#20220313-paraluni---flashloan--reentrancy)

[20220309 Fantasm Finance](#20220309-fantasm-finance)

[20220305 Bacon Protocol](#20220305-bacon-protocol---reentrancy)

[20220303 TreasureDAO](#20220303-treasuredao---zero-fee)

[20220214 BuildFinance - DAO](#20220214-buildfinance---dao)

[20220208 Sandbox LAND](#20220208-sandbox-land---access-control)

[20220206 Meter](#20220206-Meter---bridge)

[20220128 Qubit Finance](#20220128-qubit-finance---bridge-address0safetransferfrom-does-not-revert)

[20220118 Multichain (Anyswap)](#20220118-multichain-anyswap---insufficient-token-validation)

</details>
<details> <summary> 2021 </summary>
  
[20211221 Visor Finance](#20211221-visor-finance---reentrancy)

[20211218 Grim Finance](#20211218-grim-finance---flashloan--reentrancy)

[20211214 Nerve Bridge](#20211214-nerve-bridge---swap-metapool-attack)

[20211130 MonoX Finance](#20211130-monox-finance---price-manipulation)

[20211027 Cream Finance](#20211027-creamfinance---price-manipulation)

[20211015 Indexed Finance](#20211015-indexed-finance---price-manipulation)

[20210916 SushiSwap Miso](#20210916-sushiswap-miso)

[20210915 Nimbus Platform](#20210915-nimbus-platform)

[20210915 NowSwap Platform](#20210915-nowswap-platform)

[20210912 ZABU Finance](#20210912-ZABU-Finance---Deflationary-token-uncompatible)

[20210903 DAO Maker](#20210903-dao-maker---bad-access-controal)

[20210830 Cream Finance](#20210830-cream-finance---flashloan-attack--reentrancy)

[20210817 XSURGE](#20210817-xsurge---flashloan-attack--reentrancy)

[20210811 Poly Network](#20210811-poly-network---bridge-getting-around-modifier-through-cross-chain-message)

[20210804 WaultFinance](#20210804-waultfinace---flashloan-price-manipulation)

[20210728 Levyathan Finance](#20210728-levyathan-finance---i-lost-keys-and-minting-ii-vulnerable-emergencywithdraw)

[20210710 Chainswap](#20210710-chainswap---bridge-logic-flaw)

[20210702 Chainswap](#20210702-chainswap---bridge-logic-flaw)

[20210628 SafeDollar](#20210628-safedollar---deflationary-token-uncompatible)

[20210625 xWin Finance](#20210625-xwin-finance---subscription-incentive-mechanism)

[20210622 Eleven Finance](#20210622-eleven-finance---doesnt-burn-shares)

[20210607 88mph NFT](#20210607-88mph-nft---access-control)

[20210603 PancakeHunny](#20210603-pancakehunny---incorrect-calculation)

[20210527 BurgerSwap](#20210527-burgerswap---mathematical-flaw--reentrancy)

[20210519 PancakeBunny](#20210519-pancakebunny---price-oracle-manipulation)

[20210508 Rari Capital](#20210509-raricapital---cross-contract-reentrancy)

[20210508 Value Defi](#20210508-value-defi---cross-contract-reentrancy)

[20210502 Spartan](#20210502-spartan---logic-flaw)

[20210428 Uranium](#20210428-uranium---miscalculation)

[20210308 DODO](#20210308-dodo---flashloan-attack)

[20210305 Paid Network](#20210305-paid-network---private-key-compromised)

[20210125 Sushi Badger Digg](#20210125-sushi-badger-digg---sandwich-attack)

</details>
<details> <summary> Before 2020 </summary>

[20201229 Cover Protocol](#20201229-cover-protocol)

[20201121 Pickle Finance](#20201121-pickle-finance)

[20201026 Harvest Finance](#20201026-harvest-finance---flashloan-attack)

[20200804 Opyn Protocol](#20200804-opyn-protocol---msgValue-in-loop)

[20200618 Bancor Protocol](#20200618-bancor-protocol---access-control)

[20180422 Beauty Chain](#20180422-beauty-chain---integer-overflow)

[20171106 Parity - 'Accidentally Killed It'](#20171106-parity---accidentally-killed-it)

</details>

---

### Transaction debugging tools

[Phalcon](https://explorer.phalcon.xyz/) | [Tx tracer](https://openchain.xyz/trace) | [Cruise](https://cruise.supremacy.team/) | [Ethtx](https://ethtx.info/) | [Tenderly](https://dashboard.tenderly.co/explorer) | [eigenphi](https://tx.eigenphi.io/analyseTransaction)

### Ethereum Signature Database

[4byte](https://www.4byte.directory/) | [sig db](https://openchain.xyz/signatures) | [etherface](https://www.etherface.io/hash)

### Useful tools

[ABI to interface](https://gnidan.github.io/abi-to-sol/) | [Get ABI for unverified contracts](https://abi.w1nt3r.xyz/) | [ETH Calldata Decoder](https://apoorvlathey.com/eth-calldata-decoder/) | [ETHCMD - Guess ABI](https://www.ethcmd.com/tools/decode-calldata/) | [Abi tools](https://openchain.xyz/tools/abi)

### Hacks Dashboard

[Slowmist](https://hacked.slowmist.io/) | [Defillama](https://defillama.com/hacks) | [De.Fi](https://de.fi/rekt-database) | [Rekt](https://rekt.news/) | [Cryptosec](https://cryptosec.info/defi-hacks/)

---

### List of DeFi Hacks & POCs

### 20231024 MaestroRouter2 - Arbitrary External Call

### Lost: ~$280ETH

Test

```
forge test --contracts .\src\test\MaestroRouter2_exp.sol --evm-version 'shanghai' -vvv
```

#### Contract

[MaestroRouter2_exp.sol](src/test/MaestroRouter2_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1717014871836098663

https://twitter.com/BeosinAlert/status/1717013965203804457

---

### 20231022 OpenLeverage - Business Logic Flaw

### Lost: ~$8K

Test

```
forge test --contracts ./src/test/OpenLeverage_exp.sol -vvv
```

#### Contract

[OpenLeverage_exp.sol](src/test/OpenLeverage_exp.sol)

#### Link Reference

https://defimon.xyz/exploit/bsc/0x5366c6ba729d9cf8d472500afc1a2976ac2fe9ff

---

### 20231019 kTAF - CompoundV2 Inflation Attack

### Lost: ~$8K

Test

```
forge test --contracts ./src/test/kTAF_exp.sol -vvv
```

#### Contract

[kTAF_exp.sol](src/test/kTAF_exp.sol)

#### Link Reference

https://defimon.xyz/attack/mainnet/0x325999373f1aae98db2d89662ff1afbe0c842736f7564d16a7b52bf5c777d3a4

---

### 20231018 MicDao - Price Manipulation

### Lost: ~$13K

Test

```
forge test --contracts ./src/test/MicDao_exp.sol -vvv
```

#### Contract

[MicDao_exp.sol](src/test/MicDao_exp.sol)

#### Link Reference

https://twitter.com/CertiKAlert/status/1714677875427684544

https://twitter.com/ChainAegis/status/1714837519488205276

---

### 20231013 BelugaDex - Price manipulation

### Lost: ~$175K

Test

```
forge test --contracts ./src/test/BelugaDex_exp.sol -vvv
```

#### Contract

[BelugaDex_exp.sol](src/test/BelugaDex_exp.sol)

#### Link Reference

https://twitter.com/AnciliaInc/status/1712676040471105870

https://twitter.com/CertiKAlert/status/1712707006979613097

---

### 20231013 WiseLending - Donate Inflation ExchangeRate && Rounding Error

### Lost: ~$260K

Test

```
forge test --contracts ./src/test/WiseLending_exp.sol --evm-version 'shanghai' -vvv
```

#### Contract

[WiseLending_exp.sol](src/test/WiseLending_exp.sol)

#### Link Reference

https://twitter.com/bbbb/status/1712841315522638034

https://twitter.com/BlockSecTeam/status/1712871304993689709

---

### 20231012 Platypus - Business Logic Flaw

### Lost: ~$2M

Test

```
forge test --contracts ./src/test/Platypus03_exp.sol -vvv
```

#### Contract

[Platypus03_exp.sol](src/test/Platypus03_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1712445197538468298

https://twitter.com/peckshield/status/1712354198246035562

---

### 20231011 BH - Price manipulation

### Lost: ~$1.27M

Test

```
forge test --contracts ./src/test/BH_exp.sol -vvv
```

#### Contract

[BH_exp.sol](src/test/BH_exp.sol)

#### Link Reference

https://twitter.com/BeosinAlert/status/1712139760813375973

https://twitter.com/DecurityHQ/status/1712118881425203350

---

### 20231008 pSeudoEth - Pool manipulation

### Lost: ~$2.3K

Test

```
forge test --contracts ./src/test/pSeudoEth_exp.sol -vvv
```

#### Contract

[pSeudoEth_exp.sol](src/test/pSeudoEth_exp.sol)

#### Link Reference

https://twitter.com/CertiKAlert/status/1710979615164944729

---

### 20231007 StarsArena - Reentrancy

### Lost: ~$3M

Test

```
forge test --contracts ./src/test/StarsArena_exp.sol -vvv
```

#### Contract

[StarsArena_exp.sol](src/test/StarsArena_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1710556926986342911

https://twitter.com/Phalcon_xyz/status/1710554341466395065

https://twitter.com/peckshield/status/1710555944269292009

---

### 20231005 DePayRouter - Business Logic Flaw

### Lost: ~$ 827 USDC

Test

```
forge test --contracts ./src/test/DePayRouter_exp.sol -vvv
```

#### Contract

[DePayRouter_exp.sol](src/test/DePayRouter_exp.sol)

#### Link Reference

https://twitter.com/CertiKAlert/status/1709764146324009268

---

### 20230930 FireBirdPair - Lack Slippage Protection

### Lost: ~$3.2K MATIC

Test

```
forge test --contracts ./src/test/FireBirdPair_exp.sol -vvv
```

#### Contract

[FireBirdPair_exp.sol](src/test/FireBirdPair_exp.sol)

#### Link Reference

https://explorer.phalcon.xyz/tx/polygon/0x96d80c609f7a39b45f2bb581c6ba23402c20c2b6cd528317692c31b8d3948328

---

### 20230929 DEXRouter - Arbitrary External Call

### Lost: ~$4K

Test

```
forge test --contracts ./src/test/DEXRouter_exp.sol -vvv
```

#### Contract

[DEXRouter_exp.sol](src/test/DEXRouter_exp.sol)

#### Link Reference

https://twitter.com/DecurityHQ/status/1707851321909428688

---

### 20230927 XSDWETHpool - Reentrancy

### Lost: ~$56.9BNB

Test

```
forge test --contracts ./src/test/XSDWETHpool_exp.sol -vvv
```

#### Contract

[XSDWETHpool_exp.sol](src/test/XSDWETHpool_exp.sol)

#### Link Reference

https://twitter.com/CertiKAlert/status/1706765042916450781

---

### 20230924 KubSplit - Pool manipulation

### Lost: ~$78K

Test

```
forge test --contracts ./src/test/Kub_Split_exp.sol -vvv
```

#### Contract

[Kub_Split_exp.sol](src/test/Kub_Split_exp.sol)

#### Link Reference

https://twitter.com/CertiKAlert/status/1705966214319612092

---

### 20230921 CEXISWAP - Incorrect Access Control

### Lost: ~$30K

Test

```
forge test --contracts ./src/test/CEXISWAP_exp.sol -vvv
```

#### Contract

[CEXISWAP_exp.sol](src/test/CEXISWAP_exp.sol)

#### Link Reference

https://twitter.com/DecurityHQ/status/1704759560614126030

---

### 20230916 uniclyNFT - Reentrancy

### Lost: 1 NFT

Test

```
forge test --contracts ./src/test/uniclyNFT_exp.sol -vvv
```

#### Contract

[uniclyNFT_exp.sol](src/test/uniclyNFT_exp.sol)

#### Link Reference

https://twitter.com/DecurityHQ/status/1703096116047421863

---

### 20230911 0x0DEX - Parameter manipulation

### Lost: ~$61K

Test

```
forge test --contracts ./src/test/0x0DEX_exp.sol -vvv
```

#### Contract

[0x0DEX_exp.sol](src/test/0x0DEX_exp.sol)

#### Link Reference

https://0x0ai.notion.site/0x0ai/0x0-Privacy-DEX-Exploit-25373263928b4f18b31c438b2a040e33

---

### 20230909 BFCToken - Business Logic Flaw

### Lost: ~$38K

Test

```
forge test --contracts ./src/test/BFCToken_exp.sol -vvv
```

#### Contract

[BFCToken_exp.sol](src/test/BFCToken_exp.sol)

#### Link Reference

https://twitter.com/CertiKAlert/status/1700621314246017133

---

### 20230908 APIG - Business Logic Flaw

### Lost: ~$169K

Test

```
forge test --contracts ./src/test/APIG_exp.sol -vvv
```

#### Contract

[APIG_exp.sol](src/test/APIG_exp.sol)

#### Link Reference

https://twitter.com/CertiKAlert/status/1700128158647734745

---

### 20230907 HCT - Price Manipulation

### Lost: ~$30.5BNB

Test

```
forge test --contracts ./src/test/HCT_exp.sol -vvv
```

#### Contract

[HCT_exp.sol](src/test/HCT_exp.sol)

#### Link Reference

https://twitter.com/leovctech/status/1699775506785198499

---

### 20230905 JumpFarm - Rebasing logic issue

### Lost: ~$2.4ETH

Test

```
forge test --contracts ./src/test/JumpFarm_exp.sol -vvv
```

#### Contract

[JumpFarm_exp.sol](src/test/JumpFarm_exp.sol)

#### Link Reference

https://twitter.com/DecurityHQ/status/1699384904218202618

---

### 20230905 HeavensGate - Rebasing logic issue

### Lost: ~$8ETH

Test

```
forge test --contracts ./src/test/HeavensGate_exp.sol -vvv
```

#### Contract

[HeavensGate_exp.sol](src/test/HeavensGate_exp.sol)

#### Link Reference

https://explorer.phalcon.xyz/tx/eth/0xe28ca1f43036f4768776805fb50906f8172f75eba3bf1d9866bcd64361fda834

---

### 20230905 FloorDAO - Rebasing logic issue

### Lost: ~$40ETH

Test

```
forge test --contracts ./src/test/FloorDAO_exp.sol -vvv
```

#### Contract

[FloorDAO_exp.sol](src/test/FloorDAO_exp.sol)

#### Link Reference

https://twitter.com/PeckShieldAlert/status/1698962105058361392

https://medium.com/floordao/floor-post-mortem-incident-summary-september-5-2023-e054a2d5afa4

---

### 20230902 DAppSocial - Business Logic Flaw

### Lost: ~$16K

Test

```
forge test --contracts ./src/test/DAppSocial_exp.sol -vvv
```

#### Contract

[DAppSocial_exp.sol](src/test/DAppSocial_exp.sol)

#### Link Reference

https://twitter.com/DecurityHQ/status/1698064511230464310

---

### 20230827 Balancer - Rounding Error && Business Logic Flaw

### Lost: ~$2M

Test

```
forge test --contracts ./src/test/Balancer_exp.sol -vvv
```

#### Contract

[Balancer_exp.sol](src/test/Balancer_exp.sol)

#### Link Reference

https://medium.com/balancer-protocol/rate-manipulation-in-balancer-boosted-pools-technical-postmortem-53db4b642492

https://blocksecteam.medium.com/yet-another-risk-posed-by-precision-loss-an-in-depth-analysis-of-the-recent-balancer-incident-fad93a3c75d4

---

### 20230829 EAC - Price Manipulation

### Lost: ~$29BNB

Test

```
forge test --contracts ./src/test/EAC_exp.sol -vvv
```

#### Contract

[EAC_exp.sol](src/test/EAC_exp.sol)

#### Link Reference

https://twitter.com/bbbb/status/1696520866564350157

---

### 20230826 SVT - flawed price calculation

### Lost: ~$400K

Test

```
forge test --contracts ./src/test/SVT_exp.sol -vvv
```

#### Contract

[SVT_exp.sol](src/test/SVT_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1695285435671392504?s=20

---

### 20230824 GSS - skim token balance

### Lost: ~$25K

Test

```
forge test --contracts ./src/test/GSS_exp.sol -vvv
```

#### Contract

[GSS_exp.sol](src/test/GSS_exp.sol)

#### Link Reference

https://twitter.com/bbbb/status/1694571228185723099

---

### 20230821 EHIVE - Business Logic Flaw

### Lost: ~$15K

Test

```
forge test --contracts ./src/test/EHIVE_exp.sol -vvv
```

#### Contract

[EHIVE_exp.sol](src/test/EHIVE_exp.sol)

#### Link Reference

https://twitter.com/bulu4477/status/1693636187485872583

---

### 20230819 BTC20 - Price Manipulation

### Lost: ~$18ETH

Test

```
forge test --contracts ./src/test/BTC20_exp.sol -vvv
```

#### Contract

[BTC20_exp.sol](src/test/BTC20_exp.sol)

#### Link Reference

https://twitter.com/DecurityHQ/status/1692924369662513472

---

### 20230818 ExactlyProtocol - insufficient validation

### Lost: ~$7M

Test

```
forge test --contracts ./src/test/Exactly_exp.sol -vvv
```

#### Contract

[Exactly_exp.sol](src/test/Exactly_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1692533280971936059

https://medium.com/@exactly_protocol/exactly-protocol-incident-post-mortem-b4293d97e3ed

---

### 20230814 ZunamiProtocol - Price Manipulation

### Lost: ~$2M

Test

```
forge test --contracts ./src/test/Zunami_exp.sol --evm-version 'shanghai' -vvv
```

#### Contract

[Zunami_exp.sol](src/test/Zunami_exp.sol)

#### Link Reference

https://twitter.com/peckshield/status/1690877589005778945

https://twitter.com/BlockSecTeam/status/1690931111776358400

---

### 20230809 EarningFram - Reentrancy

### Lost: ~$286k

Test

```
forge test --contracts ./src/test/EarningFram_exp.sol -vvv
```

#### Contract

[EarningFram_exp.sol](src/test/EarningFram_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1689182459269644288

---

### 20230802 CurveBurner - Lack Slippage Protection

### Lost: ~$36K

Test

```
forge test --contracts ./src/test/CurveBurner_exp.sol -vvv
```

#### Contract

[CurveBurner_exp.sol](src/test/CurveBurner_exp.sol)

#### Link Reference

https://medium.com/@Hypernative/exotic-culinary-hypernative-systems-caught-a-unique-sandwich-attack-against-curve-finance-6d58c32e436b

---

### 20230802 Uwerx - Fault logic

### Lost: ~$176ETH

Test

```
forge test --contracts ./src/test/Uwerx_exp.sol -vvv
```

#### Contract

[Uwerx_exp.sol](src/test/Uwerx_exp.sol)

#### Link Reference

https://twitter.com/deeberiroz/status/1686683788795846657

https://twitter.com/CertiKAlert/status/1686667720920625152

https://etherscan.io/tx/0x3b19e152943f31fe0830b67315ddc89be9a066dc89174256e17bc8c2d35b5af8

---

### 20230801 NeutraFinance - Price Manipulation

### Lost: ~$23ETH

Test

```
forge test --contracts ./src/test/NeutraFinance_exp.sol -vvv
```

#### Contract

[NeutraFinance_exp.sol](src/test/NeutraFinance_exp.sol)

#### Link Reference

https://twitter.com/phalcon_xyz/status/1686654241111429120

---

### 20230801 LeetSwap - Access Control

### Lost: ~$630K

Test

```
forge test --contracts ./src/test/Leetswap_exp.sol -vvv
```

#### Contract

[Leetswap_exp.sol](src/test/Leetswap_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1686217464051539968

https://twitter.com/peckshield/status/1686209024587710464

---

### 20230731 GYMNET - Insufficient validation

### Lost: Unclear

Test

```
forge test --contracts ./src/test/GYMNET_exp.sol -vvv
```

#### Contract

[GYMNET_exp.sol](src/test/GYMNET_exp.sol)

#### Link Reference

https://twitter.com/AnciliaInc/status/1686605510655811584

---

### 20230730 Curve - Vyper Compiler Bug && Reentrancy

### Lost: ~ $41M

Test

```
forge test --contracts ./src/test/Curve_exp01.sol -vvv
```

#### Contract

[Curve_exp01.sol](src/test/Curve_exp01.sol) | [Curve_exp02.sol](src/test/Curve_exp02.sol)

#### Link Reference

https://hackmd.io/@LlamaRisk/BJzSKHNjn

---

### 20230726 Carson - Price manipulation

### Lost: ~$150K

Test

```
forge test --contracts ./src/test/Carson_exp.sol -vvv
```

#### Contract

[Carson_exp.sol](src/test/Carson_exp.sol)

#### Link Reference

https://twitter.com/BeosinAlert/status/1684393202252402688

https://twitter.com/Phalcon_xyz/status/1684503154023448583

https://twitter.com/hexagate_/status/1684475526663004160

---

### 20230724 Palmswap - Business Logic Flaw

### Lost: ~$900K

Test

```
forge test --contracts ./src/test/Palmswap_exp.sol -vvv
```

#### Contract

[Palmswap_exp.sol](src/test/Palmswap_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1683680026766737408

---

### 20230723 MintoFinance - Signature Replay

### Lost: ~$9K

Test

```
forge test --contracts ./src/test/MintoFinance_exp.sol -vvv
```

#### Contract

[MintoFinance_exp.sol](src/test/MintoFinance_exp.sol)

#### Link Reference

https://twitter.com/bbbb/status/1683180340548890631

---

### 20230722 Conic Finance 02 - Price Manipulation

### Lost: ~$934K

Test

```
forge test --contracts ./src/test/Conic02_exp.sol --evm-version 'shanghai' -vvv
```

#### Contract

[Conic02_exp.sol](src/test/Conic02_exp.sol)

#### Link Reference

https://medium.com/@ConicFinance/post-mortem-eth-and-crvusd-omnipool-exploits-c9c7fa213a3d

https://twitter.com/spreekaway/status/1682467603518726144

---

### 20230721 Conic Finance - Read-Only-Reentrancy && MisConfiguration

### Lost: ~$3.25M

Testing

```
forge test --contracts ./src/test/Conic_exp.sol -vvv
```

#### Contract

[Conic_exp.sol](src/test/Conic_exp.sol)|[Conic_exp2.sol](src/test/Conic_exp2.sol)

#### Link Reference

https://medium.com/@ConicFinance/post-mortem-eth-and-crvusd-omnipool-exploits-c9c7fa213a3d

https://twitter.com/BlockSecTeam/status/1682356244299010049

---

### 20230721 SUT - Business Logic Flaw

### Lost: ~$8k

Testing

```
forge test --contracts ./src/test/SUT_exp.sol -vvv
```

#### Contract

[SUT_exp.sol](src/test/SUT_exp.sol)

#### Link Reference

https://twitter.com/bulu4477/status/1682983956080377857

---

### 20230720 Utopia - Business Logic Flaw

### Lost: ~$119k

Testing

```
forge test --contracts ./src/test/Utopia_exp.sol -vvv
```

#### Contract

[Utopia_exp.sol](src/test/Utopia_exp.sol)

#### Link Reference

https://twitter.com/DeDotFiSecurity/status/1681923729645871104

https://twitter.com/bulu4477/status/1682380542564769793

---

### 20230720 FFIST - Business Logic Flaw

### Lost: ~$110k

Testing

```
forge test --contracts ./src/test/FFIST_exp.sol -vvv
```

#### Contract

[FFIST_exp.sol](src/test/FFIST_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1681869807698984961

https://twitter.com/AnciliaInc/status/1681901107940065280

---

### 20230718 APEDAO - Business Logic Flaw

### Lost: ~$7K

Testing

```
forge test --contracts ./src/test/ApeDAO_exp.sol -vvv
```

#### Contract

[ApeDAO_exp.sol](src/test/ApeDAO_exp.sol)

#### Link Reference

https://twitter.com/BeosinAlert/status/1681316257034035201

---

### 20230718 BNO - Invalid emergency withdraw mechanism

### Lost: ~$505K

Testing

```
forge test --contracts ./src/test/BNO_exp.sol -vvv
```

#### Contract

[BNO_exp.sol](src/test/BNO_exp.sol)

#### Link Reference

https://twitter.com/BeosinAlert/status/1681116206663876610

---

### 20230717 NewFi - Lack Slippage Protection

### Lost: ~$31K

Testing

```
forge test --contracts ./src/test/NewFi_exp.sol -vvv
```

#### Contract

[NewFi_exp.sol](src/test/NewFi_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1680961588323557376

---

### 20230712 Platypus - Bussiness Logic Flaw

### Lost: ~$51K

Testing

```
forge test --contracts ./src/test/Platypus02_exp.sol -vvv
```

#### Contract

[Platypus02_exp.sol](src/test/Platypus02_exp.sol)

#### Link Reference

https://twitter.com/peckshield/status/1678800450303164431

---

### 20230712 WGPT - Business Logic Flaw

### Lost: ~$80k

Testing

```
forge test --contracts ./src/test/WGPT_exp.sol -vvv
```

#### Contract

[WGPT_exp.sol](src/test/WGPT_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1679042549946933248

https://twitter.com/BeosinAlert/status/1679028240982368261

---

### 20230711 RodeoFinance - TWAP Oracle Manipulation

### Lost: ~$888k

Testing

```
forge test --contracts ./src/test/RodeoFinance_exp.sol -vvv
```

#### Contract

[RodeoFinance_exp.sol](src/test/RodeoFinance_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1678765773396008967

https://twitter.com/peckshield/status/1678700465587130368

https://medium.com/@Rodeo_Finance/rodeo-post-mortem-overview-f35635c14101

---

### 20230711 Libertify - Reentrancy

### Lost: ~$452k

Testing

```
forge test --contracts ./src/test/Libertify_exp.sol -vvv
```

#### Contract

[Libertify_exp.sol](src/test/Libertify_exp.sol)

#### Link Reference

https://twitter.com/peckshield/status/1678688731908411393

https://twitter.com/Phalcon_xyz/status/1678694679767031809

---

### 20230710 ArcadiaFi - Reentrancy

### Lost: ~$400k

Testing

```
forge test --contracts ./src/test/ArcadiaFi_exp.sol -vvv
```

#### Contract

[ArcadiaFi_exp.so](src/test/ArcadiaFi_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1678250590709899264

https://twitter.com/peckshield/status/1678265212770693121

---

### 20230708 CIVNFT - Lack of access control

### Lost: ~$180k

Testing

```
forge test --contracts ./src/test/CIVNFT_exp.sol -vvv
```

#### Contract

[CIVNFT_exp.sol](src/test/CIVNFT_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1677722208893022210

https://news.civfund.org/civtrade-hack-analysis-9a2398a6bc2e

https://blog.solidityscan.com/civnft-hack-analysis-4ee79b8c33d1

---

### 20230708 Civfund - Lack of access control

### Lost: ~$165k

Testing

```
forge test --contracts ./src/test/Civfund_exp.sol -vvv
```

#### Contract

[Civfund_exp.sol](src/test/Civfund_exp.sol)

#### Link Reference

https://twitter.com/HypernativeLabs/status/1677529544062803969

https://twitter.com/BeosinAlert/status/1677548773269213184

---

### 20230707 LUSD - Price manipulation attack

### Lost: ~9464USDT

Testing

```
forge test --contracts ./src/test/LUSD_exp.sol -vvv
```

#### Contract

[LUSD_exp.sol](/src/test/LUSD_exp.sol)

#### Link Reference

https://twitter.com/AnciliaInc/status/1677391242878140417

---

### 20230704 BambooIA - Price manipulation attack

### Lost: ~200BNB

Testing

```
forge test --contracts ./src/test/Bamboo_exp.sol -vvv
```

#### Contract

[Bao_exp.sol](src/test/Bamboo_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1676220090142916611

https://twitter.com/eugenioclrc

---

### 20230704 BaoCommunity - Donate Inflation ExchangeRate && Rounding Error

### Lost: ~$46k

Testing

```
forge test --contracts ./src/test/bao_exp.sol -vvv
```

#### Contract

[Bao_exp.sol](src/test/Bao_exp.sol)

#### Link Reference

https://twitter.com/PeckShieldAlert/status/1676224397248454657

---

### 20230703 AzukiDAO - Invalid signature verification

### Lost: ~$69k

Testing

```
forge test --contracts ./src/test/AzukiDAO_exp.sol -vvv
```

#### Contract

[AzukiDAO_exp.sol](src/test/AzukiDAO_exp.sol)

#### Link Reference

https://twitter.com/sharkteamorg/status/1676892088930271232

---

### 20230630 Biswap - V3Migrator Exploit

### Lost: ~$72k

Testing

```
forge test --contracts ./src/test/Biswap_exp.sol -vvv
```

#### Contract

[Biswap_exp.sol](src/test/Biswap_exp.sol)

#### Link Reference

https://twitter.com/MetaTrustAlert/status/1674814217122349056?s=20

---

### 20230628 Themis - Manipulation of prices using Flashloan

### Lost: ~$370k

Testing

```
forge test --contracts ./src/test/Themis_exp.sol -vvv
```

#### Contract

[Themis_exp.sol](src/test/Themis_exp.sol)

#### Link Reference

https://twitter.com/BeosinAlert/status/1673930979348717570

https://twitter.com/BlockSecTeam/status/1673897088617426946

---

### 20230624 Shido - Business Loigc & Arbitrage

### Lost: 997 WBNB

Testing

```
forge test --contracts ./src/test/SHIDO_exp.sol -vvv
```

#### Contract

[SHIDO_exp.sol](src/test/SHIDO_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1672473343734480896

https://twitter.com/AnciliaInc/status/1672382613473083393

---

### 20230623 ShidoGlobal - Flashloan attack

### Lost: ~977BNB

Testing

```
forge test --contracts ./src/test/ShidoGlobal_exp.sol -vvv
```

#### Contract

[ShidoGlobal_exp.sol](src/test/ShidoGlobal_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1672473343734480896

---

### 20230621 BabyDogeCoin02 - Lack Slippage Protection

### Lost: ~ 441 BNB

Testing

```
forge test --contracts ./src/test/BabyDogeCoin02_exp.sol -vvv
```

#### Contract

[BabyDogeCoin02_exp.sol](src/test/BabyDogeCoin02_exp.sol)

#### Link Reference

https://twitter.com/hexagate_/status/1671517819840745475

---

### 20230621 BUNN - Reflection tokens

### Lost: ~52BNB

Testing

```
forge test --contracts ./src/test/BUNN_exp.sol -vvv
```

#### Contract

[BUNN_exp.sol](src/test//BUNN_exp.sol)

#### Link Reference

https://twitter.com/DecurityHQ/status/1671803688996806656

---

### 20230620 MIMSpell - Arbitrary External Call Vulnerability

### Lost: ~$17k

Testing

```
forge test --contracts ./src/test/MIMSpell_exp.sol -vvv
```

#### Contract

[MIMSpell_exp.sol](src/test/MIMSpell_exp.sol)

#### Link Reference

https://twitter.com/hexagate_/status/1671188024607100928?cxt=HHwWgMC--e2poLEuAAAA

---

### 20230618 ARA - Incorrect handling of permissions

### Lost: ~$125k

Testing

```
forge test --contracts ./src/test/ARA_exp.sol -vvv
```

#### Contract

[ARA_exp.sol](src/test/ARA_exp.sol)

#### Link Reference

https://twitter.com/BeosinAlert/status/1670638160550965248

---

### 20230617 Pawnfi - Business Logic Flaw

### Lost: ~$820K

Testing

```
forge test --contracts ./src/test/Pawnfi_exp.sol -vvv
```

#### Contract

[Pawnfi_exp.sol](src/test/Pawnfi_exp.sol)

#### Link Reference

https://blog.solidityscan.com/pawnfi-hack-analysis-38ac9160cbb4

---

### 20230615 CFC - Uniswap Skim() token balance attack

### Lost: ~$16k

Testing

```
forge test --contracts ./src/test/CFC_exp.sol -vvv
```

#### Contract

[CFC_exp.sol](src/test/CFC_exp.sol)

#### Link Reference

https://twitter.com/hexagate_/status/1669280632738906113

---

### 20230615 DEPUSDT_LEVUSDC - Incorrect access control

### Lost: ~$105k

Testing

```
forge test --contracts ./src/test/DEPUSDT_LEVUSDC_exp.sol -vvv
```

#### Contract

[DEPUSDT_LEVUSDC_exp.sol](src/test/DEPUSDT_LEVUSDC_exp.sol)

#### Link Reference

https://twitter.com/numencyber/status/1669278694744150016?cxt=HHwWgMDS9Z2IvKouAAAA

---

### 20230612 Sturdy Finance - Read-Only-Reentrancy

### Lost: ~$800k

Testing

```
forge test --contracts ./src/test/Sturdy_exp.sol -vvv
```

#### contract

[Sturdy_exp.sol](src/test/Sturdy_exp.sol)

#### Link Reference

https://sturdyfinance.medium.com/exploit-post-mortem-49261493307a

https://twitter.com/AnciliaInc/status/1668081008615325698

https://twitter.com/BlockSecTeam/status/1668084629654638592

---

### 20230611 SellToken04 - Price Manipulation

### Lost: ~$109k

Testing

```
forge test --contracts ./src/test/SELLC03_exp.sol -vvv
```

#### Contract

[SELLC03_exp.sol](src/test/SELLC03_exp.sol)

#### Link Reference

https://twitter.com/EoceneSecurity/status/1668468933723328513

---

### 20230607 CompounderFinance - Manipulation of funds through fluctuations in the amount of exchangeable assets

### Lost: ~$27,174

Testing

```
forge test --contracts ./src/test/CompounderFinance_exp.sol -vvv
```

#### Contract

[CompounderFinance_exp.sol](src/test/CompounderFinance_exp.sol)

#### Link Reference

https://twitter.com/numencyber/status/1666346419702362112

---

### 20230606 VINU - Price Manipulation

### Lost: ~$6k

Testing

```
forge test --contracts ./src/test/VINU_exp.sol -vvv
```

#### Contract

[VINU_exp.sol](src/test/VINU_exp.sol)

#### Link Reference

https://twitter.com/hexagate_/status/1666051854386511873?cxt=HHwWgoC24bPVgJ8uAAAA

---

### 20230606 UN - Price Manipulation

### Lost: ~$26k

Testing

```
forge test --contracts ./src/test/UN_exp.sol -vvv
```

#### Contract

[UN_exp.sol](src/test/UN_exp.sol)

#### Link Reference

https://twitter.com/MetaTrustAlert/status/1667041877428932608

---

### 20230602 NST Simple Swap - Unverified contract, wrong approval

### Lost: $40k

The hack was executed in a single transaction, resulting in the theft of $40,000 USD worth of USDT from the swap contract.

```
forge test --contracts ./src/test/NST_exp.sol -vvv
```

#### Contract

[NST_exp.sol](src/test/NST_exp.sol)

#### Link reference

https://discord.com/channels/1100129537603407972/1100129538056396870/1114142216923926528

---

### 20230601 DDCoin - Flashloan attack and smart contract vulnerability

### Lost: ~$300k

Testing

```
forge test --contracts ./src/test/DDCoin_exp.sol -vvv
```

#### Contract

[DDCoin_exp.sol](src/test/DDCoin_exp.sol)

#### Link Reference

https://twitter.com/ImmuneBytes/status/1664239580210495489
https://twitter.com/ChainAegis/status/1664192344726581255?cxt=HHwWjsDRldmHs5guAAAA

---

### 20230601 Cellframenet - Calculation issues during liquidity migration

### Lost: ~$76k

Testing

```
forge test --contracts ./src/test/Cellframe_exp.sol -vvv
```

#### Contract

[Cellframe_exp.sol](src/test/Cellframe_exp.sol)

#### Link Reference

https://twitter.com/numencyber/status/1664132985883615235?cxt=HHwWhoDTqceImJguAAAA

---

### 20230531 ERC20TokenBank - Price Manipulation

### Lost: ~$111k

Testing

```
forge test --contracts ./src/test/ERC20TokenBank_exp.sol -vvv
```

#### Contract

[ERC20TokenBank.sol](src/test/ERC20TokenBank_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1663810037788311561

---

### 20230529 Jimbo - Protocol Specific Price Manipulation

### Lost: ~$8M

Testing

```
forge test --contracts ./src/test/Jimbo_exp.sol -vvv
```

#### Contract

[Jimbo_exp.sol](src/test/Jimbo_exp.sol)

#### Link Reference

https://twitter.com/cryptofishx/status/1662888991446941697

https://twitter.com/yicunhui2/status/1663793958781353985

---

### 20230529 BabyDogeCoin - Lack Slippage Protection

### Lost: ~$135k

Testing

```
forge test --contracts ./src/test/BabyDogeCoin_exp.sol -vvv
```

#### Contract

[BabyDogeCoin_exp.sol](src/test/BabyDogeCoin_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1662744426475831298

---

### 20230529 FAPEN - Wrong balance check

### Lost: ~$600

Testing

```
forge test --contracts ./src/test/FAPEN_exp.sol -vvv
```

#### Contract

[FAPEN_exp.sol](src/test/FAPEN_exp.sol)

#### Link Reference

https://twitter.com/hexagate_/status/1663501550600302601

---

### 20230529 NOON (NO) - Wrong visibility in function

### Lost: ~$2K

Testing

```
forge test --contracts ./src/test/NOON_exp.sol -vvv
```

#### Contract

[NOON_exp.sol](src/test/NOON_exp.sol)

#### Link Reference

https://twitter.com/hexagate_/status/1663501545105702912

---

### 20230525 GPT Token - Fee Machenism Exploitation

### Lost: ~$42k

Testing

```
forge test --contracts ./src/test/GPT_exp.sol -vvv
```

#### Contract

[GPT_exp.sol](src/test/GPT_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1661424685320634368

---

### 20230524 Local Trade LCT - Improper Access Control of Close-source contract

### Lost: ~384 BNB

Testing

```
forge test --contracts ./src/test/LocalTrader_exp.sol -vvv
```

#### Contract

[LocalTrader_exp.sol](src/test/LocalTrader_exp.sol) | [LocalTrader2_exp.sol](src/test/LocalTrader2_exp.sol)

#### Link Reference

https://twitter.com/numencyber/status/1661213691893944320

---

### 20230524 CS Token - Outdated Global Variable

### Lost: ~714K USD

Testing

```
forge test --contracts ./src/test/CS_exp.sol -vvv
```

#### Contract

[CS_exp.sol](src/test/CS_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1661098394130198528

https://twitter.com/numencyber/status/1661207123102167041

---

### 20230523 LFI Token - Business Logic Flaw

### Lost: ~36K USD

Testing

```
forge test --contracts ./src/test/LFI_exp.sol -vvv
```

#### Contract

[LFI_exp.sol](src/test/LFI_exp.sol)

#### Link Reference

https://twitter.com/AnciliaInc/status/1660767088699666433

---

### 20230514 landNFT - Lack of permission control

### Lost: 149,616 $BUSD

Testing

```
forge test --contracts ./src/test/landNFT_exp.sol -vvv
```

#### Contract

[landNFT_exp.sol](src/test/landNFT_exp.sol)

#### Link Reference

https://twitter.com/BeosinAlert/status/1658000784943124480

---

### 20230514 SellToken03 - Unchecked User Input

### Lost: Unclear

Testing

```
forge test --contracts ./src/test/SELLC02_exp.sol -vvv
```

#### Contract

[SELLC02_exp.sol](src/test/SELLC02_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1657715018908180480

---

### 20230513 Bitpaidio - Business Logic Flaw

### Lost: ~$30K

Testing

```
forge test --contracts ./src/test/Bitpaidio_exp.sol -vvv
```

#### Contract

[Bitpaidio_exp.sol](src/test/Bitpaidio_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1657411284076478465

---

### 20230512 LW - FlashLoan Price Manipulation

### Lost: ~$50k

Testing

```
forge test --contracts ./src/test/LW_exp.sol -vvv
```

#### Contract

[LW_exp.sol](src/test/LW_exp.sol)

#### Link Reference

https://twitter.com/PeckShieldAlert/status/1656850634312925184

https://twitter.com/hexagate_/status/1657051084131639296

---

### 20230513 SellToken02 - Price Manipulation

### Lost: ~$197k

Testing

```
forge test --contracts ./src/test/SellToken_exp.sol -vvv
```

#### Contract

[SellToken_exp.sol](src/test/SellToken_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1657324561577435136

---

### 20230511 SellToken01 - Business Logic Flaw

### Lost: ~$95k

Testing

```
forge test --contracts ./src/test/SELLC_exp.sol -vvv
```

#### Contract

[SELLC_exp.sol](src/test/SELLC_exp.sol)

#### Link Reference

https://twitter.com/AnciliaInc/status/1656337400329834496

https://twitter.com/AnciliaInc/status/1656341587054702598

---

### 20230510 SNK - Reward Calculation Error

### Lost: ~$197k

Testing

```
forge test --contracts ./src/test/SNK_exp.sol -vvv
```

#### Contract

[SNK_exp.sol](src/test/SNK_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1656176776425644032

---

### 20230506 Melo - Access Control

### Lost: ~$90k

Testing

```
forge test --contracts ./src/test/Melo_exp.sol -vvv
```

#### Contract

[Melo_exp.sol](src/test/Melo_exp.sol)

#### Link Reference

https://twitter.com/peckshield/status/1654667621139349505

---

### 20230505 DEI - wrong implemention

#### Lost: ~5.4M USDC

Testing

```
forge test --mc DEIPocTest -vvv
```

#### Contract

[DEI_exp.sol](src/test/DEI_exp.sol)

#### Link Reference

https://twitter.com/eugenioclrc/status/1654576296507088906

---

### 20230503 NeverFall - Price Manipulation

### Lost: ~74K

Testing

```
forge test --contracts ./src/test/NeverFall_exp.sol -vvv
```

#### Contract

[NeverFall_exp.sol](src/test/NeverFall_exp.sol)

#### Link Reference

https://twitter.com/BeosinAlert/status/1653619782317662211

---

### 20230502 Level - Business Logic Flaw

### Lost: ~$1M

Testing

```
forge test --contracts ./src/test/Level_exp.sol -vvv
```

#### Contract

[Level_exp.sol](src/test/Level_exp.sol)

#### Link Reference

https://twitter.com/peckshield/status/1653149493133729794

https://twitter.com/BlockSecTeam/status/1653267431127920641

---

### 20230428 0vix - FlashLoan Price Manipulation

### Lost: ~$2M

Testing

```
forge test --contracts ./src/test/0vix_exp.sol -vvv
```

#### Contract

[0vix_exp.sol](src/test/0vix_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1651932529874853888

https://twitter.com/peckshield/status/1651923235603361793

https://twitter.com/Mudit__Gupta/status/1651958883634536448

---

### 20230427 Silo finance - Business Logic Flaw

### Lost: None

Testing

```
forge test --contracts ./src/test/silo_finance.t.sol -vvv
```

#### Contract

[silo_finance.t.sol](src/test/silo_finance.t.sol)

#### Link Reference

https://medium.com/immunefi/silo-finance-logic-error-bugfix-review-35de29bd934a

---

### 20230424 Axioma - Business Logic Flaw

### Lost: ~21 WBNB

Testing

```
forge test --contracts ./src/test/Axioma_exp.sol -vvv
```

#### Contract

[Axioma_exp.sol](src/test/Axioma_exp.sol)

#### Link Reference

https://twitter.com/HypernativeLabs/status/1650382589847302145

---

### 20230419 OLIFE - Reflection token

### Lost: ~32 WBNB

Testing

```
forge test --contracts ./src/test/OLIFE_exp.sol -vvv
```

#### Contract

[OLIFE_exp.sol](src/test/OLIFE_exp.sol)

#### Link Reference

https://twitter.com/BeosinAlert/status/1648520494516420608

---

### 20230416 Swapos V2 - error k value Attack

### Lost: ~$468k

Testing

```
forge test --contracts ./src/test/Swapos_exp.sol -vvv
```

#### Contract

[Swapos_exp.sol](src/test/Swapos_exp.sol)

#### Link Reference

https://twitter.com/CertiKAlert/status/1647530789947469825

https://twitter.com/BeosinAlert/status/1647552192243728385

---

### 20230415 HundredFinance - Donate Inflation ExchangeRate && Rounding Error

### Lost: $7M

Testing

```
forge test --contracts ./src/test/HundredFinance_2_exp.sol -vvv
```

#### Contract

[HundredFinance_2_exp.sol](src/test/HundredFinance_2_exp.sol)

#### Link Reference

https://twitter.com/peckshield/status/1647307128267476992

https://twitter.com/danielvf/status/1647329491788677121

https://twitter.com/hexagate_/status/1647334970258608131

https://blog.hundred.finance/15-04-23-hundred-finance-hack-post-mortem-d895b618cf33

---

### 20230413 yearnFinance - Misconfiguration

### Lost: $11.6M

Testing

```
forge test --contracts ./src/test/YearnFinance_exp.sol -vvv
```

#### Contract

[YearnFinance_exp.sol](src/test/YearnFinance_exp.sol)

#### Link Reference

https://twitter.com/cmichelio/status/1646422861219807233

https://twitter.com/BeosinAlert/status/1646481687445114881

---

### 20230412 MetaPoint - Unrestricted Approval

### Lost: $820k(2500BNB)

Testing

```
forge test --contracts ./src/test/MetaPoint_exp.sol -vvv
```

#### Contract

[MetaPoint_exp.sol](src/test/MetaPoint_exp.sol)

#### Link Reference

https://twitter.com/PeckShieldAlert/status/1645980197987192833

https://twitter.com/Phalcon_xyz/status/1645963327502204929

---

### 20230411 Paribus - Reentrancy

### Lost: $100k

Testing

```
forge test --contracts ./src/test/Paribus_exp.sol -vvv
```

#### Contract

[Paribus_exp.sol](src/test/Paribus_exp.sol)

#### Link Reference

https://twitter.com/Phalcon_xyz/status/1645742620897955842

https://twitter.com/BlockSecTeam/status/1645744655357575170

https://twitter.com/peckshield/status/1645742296904929280

---

### 20230409 SushiSwap - Unchecked User Input

### Lost: >$3.3M

Testing

```
forge test --contracts ./src/test/Sushi_Router_exp.sol -vvv
```

#### Contract

[Sushi_Router_exp.sol](src/test/Sushi_Router_exp.sol)

#### Link Reference

https://twitter.com/peckshield/status/1644907207530774530

https://twitter.com/SlowMist_Team/status/1644936375924584449

https://twitter.com/AnciliaInc/status/1644925421006520320

---

### 20230405 Sentiment - Read-Only-Reentrancy

### Lost: $1M

Testing

```
forge test --contracts ./src/test/Sentiment_exp.sol -vvv
```

#### Contract

[Sentiment_exp.sol](src/test/Sentiment_exp.sol)

#### Link Reference

https://twitter.com/peckshield/status/1643417467879059456

https://twitter.com/spreekaway/status/1643313471180644360

https://medium.com/coinmonks/theoretical-practical-balancer-and-read-only-reentrancy-part-1-d6a21792066c

---

### 20230402 Allbridge - FlashLoan price manipulation

### Lost: $550k

Testing

```
forge test --contracts ./src/test/Allbridge_exp.sol -vvv
```

#### Contract

[Allbrideg_exp.sol](src/test/Allbridge_exp.sol) | [Allbrideg_exp2.sol](src/test/Allbridge_exp2.sol)

#### Link Reference

https://twitter.com/peckshield/status/1642356701100916736

https://twitter.com/BeosinAlert/status/1642372700726505473

---

### 20230328 SafeMoon Hack

### Lost: $8.9M

Testing

```
forge test --contracts ./src/test/safeMoon_exp.sol -vvv
```

#### Contract

[safeMoon_exp.sol](src/test/safeMoon_exp.sol)

#### Link reference

https://twitter.com/zokyo_io/status/1641014520041840640

---

### 20230328 - Thena - Yield Protocol Flaw

### Lost: $10k

Testing

```
forge test --contracts ./src/test/Thena_exp.sol -vvv
```

#### Contract

[Thena_exp.sol](src/test/Thena_exp.sol)

#### Link Reference

https://twitter.com/LTV888/status/1640563457094451214?t=OBHfonYm9yYKvMros6Uw_g&s=19

---

### 20230325 - DBW- Business Logic Flaw

### Lost: $24k

Testing

```
forge test --contracts ./src/test/DBW_exp.sol -vvv
```

#### Contract

[DBW_exp.sol](src/test/DBW_exp.sol)

#### Link Reference

https://twitter.com/BeosinAlert/status/1639655134232969216

https://twitter.com/AnciliaInc/status/1639289686937210880

---

### 20230322 - BIGFI - Reflection token

### Lost: $30k

Testing

```
forge test --contracts ./src/test/BIGFI_exp.sol -vvv
```

#### Contract

[BIGFI_exp.sol](src/test/BIGFI_exp.sol)

#### Link Reference

https://twitter.com/HypernativeLabs/status/1638522680654675970

---

### 20230317 - ParaSpace NFT - Flashloan + scaledBalanceOf Manipulation

### Rescued: ~2,909 ETH

Testing

```
forge test --contracts ./src/test/paraspace_exp.sol -vvv
```

#### Contract

[paraspace_exp.sol](src/test/paraspace_exp.sol)

[Paraspace_exp_2.sol](src/test/Paraspace_exp_2.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1636650252844294144

---

### 20230315 - Poolz - integer overflow

### Lost: ~$390K

Testing

```
forge test --contracts ./src/test/poolz_exp.sol -vvv
```

#### Contract

[poolz_exp.sol](src/test/poolz_exp.sol)

#### Link Reference

https://twitter.com/peckshield/status/1635860470359015425

---

### 20230313 - EulerFinance - Business Logic Flaw

### Lost: ~$200M

Testing

```
forge test --contracts ./src/test/Euler_exp.sol -vvv
```

#### Contract

[Euler_exp.sol](src/test/Euler_exp.sol)

#### Link Reference

https://twitter.com/FrankResearcher/status/1635241475989721089

https://twitter.com/nomorebear/status/1635230621856600064

https://twitter.com/peckshield/status/1635229594596036608

https://twitter.com/BlockSecTeam/status/1635262150624305153

---

### 20230308 - DKP - FlashLoan price manipulation

### Lost: ~$80K

Testing

```
forge test --contracts ./src/test/DKP_exp.sol -vvv
```

#### Contract

[DKP_exp.sol](src/test/DKP_exp.sol)

#### Link Reference

https://twitter.com/CertiKAlert/status/1633421908996763648

---

### 20230307 - Phoenix - Access Control & Arbitrary External Call

### Lost: ~$100k

Testing

```
forge test --contracts src/test/Phoenix_exp.sol -vvv
```

#### Contract

[Phoenix_exp.sol](src/test/Phoenix_exp.sol)

#### Link Reference

https://twitter.com/HypernativeLabs/status/1633090456157401088

---

### 20230227 - LaunchZone - Access Control

### Lost: ~$320,000

Testing

```
forge test  --contracts src/test/LaunchZone_exp.sol -vvv
```

#### Contract

[LuanchZone_exp.sol](src/test/LaunchZone_exp.sol)

#### Link Reference

https://twitter.com/immunefi/status/1630210901360951296

https://twitter.com/launchzoneann/status/1631538253424918528

---

### 20230227 - swapX - Access Control

### Lost: ~$1M

Testing

```
forge test --contracts ./src/test/swapX_exp.sol -vvv
```

#### Contract

[SwapX_exp.sol](src/test/SwapX_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1630111965942018049

https://twitter.com/peckshield/status/1630100506319413250

https://twitter.com/CertiKAlert/status/1630241903839985666

---

### 20230224 - EFVault - Storage Collision

### Lost: ~$5.1M

Testing

```
forge test --contracts ./src/test/EFVault_exp.sol -vvv
```

#### Contract

[EFVault_exp.sol](src/test/EFVault_exp.sol)

#### Link Reference

https://twitter.com/peckshield/status/1630490333716029440

https://twitter.com/drdr_zz/status/1630500170373685248

https://twitter.com/gbaleeeee/status/1630587522698080257

---

### 20230222 - DYNA - Business Logic Flaw

### Lost: ~$21k

Testing

```
forge test --contracts ./src/test/DYNA_exp.sol -vvv
```

#### Contract

[DYNA_exp.sol](src/test/DYNA_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1628319536117153794

https://twitter.com/BeosinAlert/status/1628301635834486784

---

### 20230218 - RevertFinance - Arbitrary External Call Vulnerability

### Lost: ~$30k

Testing

```
forge test --contracts ./src/test/RevertFinance_exp.sol -vvv
```

#### Contract

[RevertFinance_exp.sol](src/test/RevertFinance_exp.sol)

#### Link Reference

https://mirror.xyz/revertfinance.eth/3sdpQ3v9vEKiOjaHXUi3TdEfhleAXXlAEWeODrRHJtU

---

### 20230217 - Starlink - Business Logic Flaw

### Lost: ~$12k

Testing

```
forge test --contracts ./src/test/Starlink_exp.sol -vvv
```

#### Contract

[Starlink_exp.sol](src/test/Starlink_exp.sol)

#### Link Reference

https://twitter.com/NumenAlert/status/1626447469361102850

https://twitter.com/bbbb/status/1626392605264351235

---

### 20230217 - Dexible - Arbitrary External Call Vulnerability

### Lost: ~$1.5M

Testing

```
forge test --contracts src/test/Dexible_exp.sol -vvv
```

#### Contract

[Dexible_exp.sol](src/test/Dexible_exp.sol)

#### Link Reference

https://twitter.com/peckshield/status/1626493024879673344

https://twitter.com/MevRefund/status/1626450002254958592

---

### 20230217 - Platypusdefi - Business Logic Flaw

### Lost: ~$8.5M

Testing

```
forge test --contracts src/test/Platypus_exp.sol -vvv
```

#### Contract

[Platypus_exp.sol](src/test/Platypus_exp.sol)

#### Link Reference

https://twitter.com/peckshield/status/1626367531480125440

https://twitter.com/spreekaway/status/1626319585040338953

---

### 20230210 - Sheep - Reflection token

### Lost: ~$3K

Testing

```
forge test --contracts src/test/Sheep_exp.sol -vvv
```

#### Contract

[Sheep_exp.sol](src/test/Sheep_exp.sol)

#### Link Reference

https://twitter.com/BlockSecTeam/status/1623999717482045440

https://twitter.com/BlockSecTeam/status/1624077078852210691

---

### 20230210 - dForce - Read-Only-Reentrancy

### Lost: ~$3.65M

Testing

```
forge test --contracts ./src/test/dForce_exp.sol -vvv
```

#### Contract

[dForce_exp.sol](src/test/dForce_exp.sol)

#### Link reference

https://twitter.com/SlowMist_Team/status/1623956763598000129

https://twitter.com/BlockSecTeam/status/1623901011680333824

https://twitter.com/peckshield/status/1623910257033617408

---

### 20230207 - CowSwap - Arbitrary External Call Vulnerability

### Lost: ~$120k

Testing

```
forge test --contracts ./src/test/CowSwap_exp.sol -vvv
```

#### Contract

[CowSwap_exp.sol](src/test/CowSwap_exp.sol)

#### Link reference

https://twitter.com/MevRefund/status/1622793836291407873

https://twitter.com/peckshield/status/1622801412727148544

---

### 20230207 - FDP - Reflection token

### Lost: ~16 WBNB

Testing

```
forge test --contracts src/test/FDP_exp.t.sol -vv
```

#### Contract

[FDP_exp.t.sol](src/test/FDP_exp.t.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1622806011269771266

---

### 20230203 - Spherax USDs - Balance Recalculation Bug

### Lost: ~309k USDs (Stablecoin)

Testing

```
forge test --contracts ./src/test/USDs_exp.sol -vv
```

#### Contract

[USDs_exp.sol](src/test/USDs_exp.sol)

#### Link reference

https://twitter.com/danielvf/status/1621965412832350208

https://medium.com/sperax/usds-feb-3-exploit-report-from-engineering-team-9f0fd3cef00c

---

### 20230203 - Orion Protocol - Reentrancy

### Lost: $3M

Testing

```
forge test --contracts ./src/test/Orion_exp.sol -vvv
```

#### Contract

[Orion_exp.sol](src/test/Orion_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1621337925228306433

https://twitter.com/BlockSecTeam/status/1621263393054420992

https://www.numencyber.com/analysis-of-orionprotocol-reentrancy-attack-with-poc/

---

### 20230202 - BonqDAO - Price Oracle Manipulation

### Lost: BEUR stablecoin and ALBT Token (~88M US$)

Testing

```
forge test --contracts ./src/test/BonqDAO_exp.sol -vv
```

#### Contract

[BonqDAO_exp.sol](src/test/BonqDAO_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1621043757390123008

https://twitter.com/SlowMist_Team/status/1621087651158966274

---

### 20230126 - TINU - Reflection token

### Lost: 22 ETH

Testing

```sh
forge test --contracts ./src/test/TINU_exp.t.sol -vv
```

#### Contract

[TINU_exp.t.sol](src/test/TINU_exp.t.sol)

#### Link reference

https://twitter.com/libevm/status/1618718156343873536

---

### 20230118 - QTNToken - business logic flaw

### Lost: ~2ETH

Testing

```sh
forge test --contracts ./src/test/QTN_exp.sol -vvv
```

#### Contract

[QTN_exp.sol](src/test/QTN_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1615625901739511809

---

### 20230119 - ThoreumFinance-business logic flaw

### Lost: ~2000 BNB

Testing

```sh
forge test --contracts ./src/test/ThoreumFinance_exp.sol -vvv
```

#### Contract

[ThoreumFinance_exp.sol](src/test/ThoreumFinance_exp.sol)

#### Link reference

https://bscscan.com/tx/0x3fe3a1883f0ae263a260f7d3e9b462468f4f83c2c88bb89d1dee5d7d24262b51
https://twitter.com/AnciliaInc/status/1615944396134043648

---

### 20230118 - UPSToken - business logic flaw

### Lost: ~22 ETH

Testing

```sh
forge test --contracts ./src/test/Upswing_exp.sol -vvv
```

#### Contract

[Upswing_exp.sol](src/test/Upswing_exp.sol)

#### Link reference

https://etherscan.io/tx/0x4b3df6e9c68ae482c71a02832f7f599ff58ff877ec05fed0abd95b31d2d7d912
https://twitter.com/QuillAudits/status/1615634917802807297

---

### 20230117 - OmniEstate - No Input Parameter Check

### Lost: $70k(236 BNB)

Testing

```sh
forge test --contracts ./src/test/OmniEstate_exp.sol -vvv
```

#### Contract

[OmniEstate_exp.sol](src/test/OmniEstate_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1615232012834705408

---

### 20230116 - MidasCapital - Read-only Reentrancy

### Lost: $650k

Testing

```sh
forge test --contracts ./src/test/Midas_exp.sol -vvv
```

#### Contract

[Midas_exp.sol](src/test/Midas_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1614774855999844352

https://twitter.com/BlockSecTeam/status/1614864084956254209

---

### 20230112 - UFDao - Incorrect Parameter Setting

### Lost: $90k

Testing

```sh
forge test --contracts ./src/test/UFDao_exp.sol -vvv
```

#### Contract

[UFDao_exp.sol](src/test/UFDao_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1613507804412940289

---

### 20230112 - RoeFinance - FlashLoan price manipulation

### Lost: $80k

Testing

```sh
forge test --contracts ./src/test/RoeFinance_exp.sol -vvv
```

#### Contract

[RoeFinance_exp.sol](src/test/RoeFinance_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1613267000913960976

---

### 20230110 - BRA - Business Logic Flaw

### Lost: 819 BNB (~224k$)

Testing

```sh
forge test --contracts ./src/test/BRA.exp.sol -vvv
```

#### Contract

[BRA.exp.sol](src/test/BRA.exp.sol)

#### Link reference

https://twitter.com/CertiKAlert/status/1612674916070858753

https://twitter.com/BlockSecTeam/status/1612701106982862849

---

### 20230103 - GDS - Business Logic Flaw

### Lost: $180k

Testing

```sh
forge test --contracts ./src/test/GDS_exp.sol -vvv
```

#### Contract

[GDS_exp.sol](src/test/GDS_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1610095490368180224

https://twitter.com/BlockSecTeam/status/1610167174978760704

---

<details> <summary> 2022 </summary>

### 20221230 - DFS - Insufficient validation + flashloan

### Lost: $1450

Testing

```sh
forge test --contracts ./src/test/DFS_exp.sol -vvv
```

#### Contract

[DFS_exp.sol](src/test/DFS_exp.sol)

#### Link reference

https://twitter.com/CertiKAlert/status/1608788290785665024

---

### 20221229 - JAY - Insufficient validation + Reentrancy

### Lost: $15.32 ETH

Testing

```sh
forge test --contracts ./src/test/JAY_exp.sol -vvv
```

#### Contract

[JAY_exp.sol](src/test/JAY_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1608372475225866240

---

### 20221225 - Rubic - Arbitrary External Call Vulnerability

### Lost: $1.5M

Testing

```sh
forge test --contracts ./src/test/Rubic_exp.sol -vvv
```

#### Contract

[Rubic_exp.sol](src/test/Rubic_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1606993118901198849

https://twitter.com/peckshield/status/1606937055761952770

---

### 20221223 - Defrost - Reentrancy

### Lost: $170k

Testing

```sh
forge test --contracts ./src/test/Defrost_exp.sol -vvv
```

#### Contract

[Defrost_exp.sol](src/test/Defrost_exp.sol)

#### Link reference

https://twitter.com/PeckShieldAlert/status/1606276020276891650

---

### 20221214 - Nmbplatform - FlashLoan price manipulation

### Lost: 76k

Testing

```sh
forge test --contracts ./src/test/Nmbplatform_exp.sol -vvv
```

#### Contract

[Nmbplatform_exp.sol](src/test/Nmbplatform_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1602877048124735489

---

### 20221214 - FPR - Access Control

### Lost: $29k

Testing

```sh
forge test --contracts ./src/test/FPR_exp.sol -vvv
```

#### Contract

[FPR_exp.sol](../../src/test/FPR_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1603226968706936832

https://twitter.com/chainlight_io/status/1603282848311480320

---

### 20221213 - ElasticSwap - Business Logic Flaw

### Lost: $845k

Testing

```sh
forge test --contracts ./src/test/ElasticSwap_exp.sol -vvv
```

#### Contract

[ElasticSwap_exp.sol](src/test/ElasticSwap_exp.sol)

#### Link reference

https://quillaudits.medium.com/decoding-elastic-swaps-850k-exploit-quillaudits-9ceb7fcd8d1a

---

### 20221212 - BGLD (Deflationary token) - FlashLoan price manipulation

### Lost: $18k

Testing

```sh
forge test --contracts ./src/test/BGLD_exp.sol -vvv
```

#### Contract

[BGLD_exp.sol](src/test/BGLD_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1602335214356660225

---

### 20221211 - Lodestar - FlashLoan price manipulation

### Lost: $4M

Testing

```sh
forge test --contracts ./src/test/Lodestar_exp.sol -vvv
```

#### Contract

[Lodestar_exp.sol](src/test/Lodestar_exp.sol)

#### Link reference

https://twitter.com/SolidityFinance/status/1601684150456438784

https://blog.lodestarfinance.io/post-mortem-summary-13f5fe0bb336

---

### 20221210 - MU&MUG - FlashLoan price manipulation

### Lost: $57k

Testing

```sh
forge test --contracts ./src/test/MUMUG_exp.sol -vvv
```

#### Contract

[MUMUG_exp.sol](src/test/MUMUG_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1601422462012469248

---

### 20221210 - TIFIToken - FlashLoan price manipulation

### Lost: 87 WBNB

Testing

```sh
forge test --contracts ./src/test/TIFI_exp.sol -vvv
```

#### Contract

[TIFI_exp.sol](src/test/TIFI_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1601492605535399936

---

### 20221209 - NOVAToken - Malicious Unlimted Minting (Rugged)

### Lost: 330 $BNB

Testing

```sh
forge test --contracts ./src/test/NovaExchange_exp.sol -vvv
```

#### Contract

[NovaExchange_exp.sol](src/test/NovaExchange_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1601168659585454081

---

### 20221207 - AES (Deflationary token) - Business Logic Flaw & FlashLoan price manipulation

### Lost: $60k

Testing

```sh
forge test --contracts ./src/test/AES_exp.sol -vvv
```

#### Contract

[AES_exp.sol](src/test/AES_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1600442137811689473

https://twitter.com/peckshield/status/1600418002163625984

---

### 20221205 - RFB - Predicting Random Numbers

### Lost: 12BNB

Testing

```sh
forge test --contracts ./src/test/RFB_exp.sol -vvv
```

#### Contract

[RFB_exp.sol](src/test/RFB_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1599991294947778560

---

### 20221205 - BBOX - FlashLoan price manipulation

### Lost: 12k

Testing

```sh
forge test --contracts ./src/test/BBOX_exp.sol -vvv
```

#### Contract

[BBOX_exp.sol](src/test/BBOX_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1599599614490877952

---

### 20221202 - OverNight - FlashLoan Attack

### Lost: 170k

Testing

```sh
forge test --contracts ./src/test/Overnight_exp.sol -vvv
```

#### Contract

[Overnight_exp.sol](src/test/Overnight_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1598704809690877952

---

### 20221201 - APC - FlashLoan & price manipulation

### Lost: $6k

Testing

```sh
forge test --contracts ./src/test/APC_exp.sol -vvv
```

#### Contract

[APC_exp.sol](src/test/APC_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1598262002010378241

---

### 20221129 - MBC & ZZSH - Business Logic Flaw & Access Control

### Lost $5.9k

Testing

```sh
forge test --contracts ./src/test/MBC_ZZSH_exp.sol -vvv
```

#### Contract

[MBC_ZZSH_exp.sol](../../src/test/MBC_ZZSH_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1597742575623888896

https://twitter.com/CertiKAlert/status/1597639717096460288

---

### 20221129 - SEAMAN - Business Logic Flaw

### Lost $7k

Testing

```sh
forge test --contracts ./src/test/SEAMAN_exp.sol -vvv
```

#### Contract

[SEAMAN_exp.sol](src/test/SEAMAN_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1597493955939405825

https://twitter.com/CertiKAlert/status/1597513374841044993

https://twitter.com/BeosinAlert/status/1597535796621631489

---

### 20221123 - NUM - Protocol Token incompatible

### Lost $13k

Testing

```sh
forge test --contracts ./src/test/NUM_exp.sol -vvv
```

#### Contract

[NUM_exp.sol](src/test/NUM_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1595346020237352960

---

### 20221122 - AUR - Lack of Permission Check

### Lost: $13k

Testing

```sh
forge test --contracts ./src/test/AUR_exp.sol -vvv
```

#### Contract

[AUR_exp.sol](src/test/AUR_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1595142246570958848

---

### 20221121 - sDAO - Business Logic Flaw

### Lost: $13k

Testing

```sh
forge test --contracts ./src/test/SDAO_exp.sol -vvv
```

#### Contract

[SDAO_exp.sol](src/test/SDAO_exp.sol)

#### Link reference

https://twitter.com/8olidity/status/1594693686398316544

https://twitter.com/CertiKAlert/status/1594615286556393478

---

### 20221119 - AnnexFinance - Verify flashLoan Callback

### Lost: $3k

Testing

```sh
forge test --contracts ./src/test/Annex_exp.sol -vvv
```

#### Contract

[Annex_exp.sol](src/test/Annex_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1593690338526273536

---

### 20221117 - UEarnPool - FlashLoan Attack

### Lost: $24k

Testing

```sh
forge test --contracts ./src/test/UEarnPool_exp.sol -vvv
```

#### Contract

[UEranPool_exp.sol](src/test/UEarnPool_exp.sol)

#### Link reference

https://twitter.com/CertiKAlert/status/1593094922160128000

---

### 20221116 - SheepFarm - No input validation

### Lost: ~1BNB

Testing

```sh
forge test --contracts ./src/test/SheepFram_exp.sol -vvv
```

#### Contract

[SheepFarm_exp.sol](src/test/SheepFarm_exp.sol) | [SheepFarm2_exp.sol](src/test/SheepFarm2_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1592658104394473472

https://twitter.com/BlockSecTeam/status/1592734292727455744

---

### 20221110 - DFXFinance - Reentrancy

### Lost: $4M

Testing

```sh
forge test --contracts ./src/test/DFX_exp.sol -vvv
```

#### Contract

[DFX_exp.sol](src/test/DFX_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1590960299246780417

https://twitter.com/BeosinAlert/status/1591012525914861570

https://twitter.com/AnciliaInc/status/1590839104731684865

https://twitter.com/peckshield/status/1590831589004816384

---

### 20221109 BrahTOPG - Arbitrary External Call Vulnerability

### Lost: $89k

Testing

```sh
 forge test --contracts ./src/test/BrahTOPG_exp.sol -vvv
```

#### Contract

[BrahTOPG_exp.sol](src/test/BrahTOPG_exp.sol)

#### Link reference

https://twitter.com/SlowMist_Team/status/1590685173477101570

---

### 20221108 MEV_0ad8 - Arbitrary call

### Lost: $282k

Testing

```sh
forge test --contracts src/test/MEV_0ad8.t.sol -vvvv
```

#### Contract

[MEV_0ad8.t.sol](src/test/MEV_0ad8.t.sol)

#### Link reference

https://twitter.com/Supremacy_CA/status/1590337718755954690

---

### 20221108 Kashi - Price-caching Design Defect

### Lost: $110k

Testing

```sh
forge test --contracts ./src/test/Kashi_exp.sol -vvv
```

#### Contract

[Kashi_exp.sol](src/test/Kashi_exp.sol)

#### Link reference

https://eigenphi.substack.com/p/casting-a-magic-spell-on-abracadabra

https://twitter.com/BlockSecTeam/status/1603633067876155393

---

### 20221107 MooCAKECTX - FlashLoan Attack

### Lost: $140k

Testing

```sh
forge test --contracts ./src/test/MooCAKECTX_exp.sol -vvv
```

#### Contract

[MooCAKECTX_exp.sol](src/test/MooCAKECTX_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1589501207181393920

https://twitter.com/CertiKAlert/status/1589428153591615488

---

### 20221105 BDEX - Business Logic Flaw

### Lost: 16WBNB

Testing

```sh
forge test --contracts ./src/test/BDEX_exp.sol -vvv
```

#### Contract

[BDEX_exp.sol](src/test/BDEX_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1588579143830343683

---

### 20221027 VTF Token - Incorrect Reward calculation

### Lost: $50k

Testing

```sh
forge test --contracts ./src/test/VTF_exp.sol -vvv
```

#### Contract

[VTF_exp.sol](src/test/VTF_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1585575129936977920

https://twitter.com/peckshield/status/1585572694241988609

https://twitter.com/BeosinAlert/status/1585587030981218305

---

### 20221027 Team Finance - Liquidity Migration Exploit

### Lost: Multiple Tokens ~$15.8M US$

Testing

```sh
forge test --contracts ./src/test/TeamFinance.exp.sol -vvv
```

#### Contract

[TeamFinance.exp.sol](src/test/TeamFinance.exp.sol)

#### Link reference

https://twitter.com/TeamFinance_/status/1585770918873542656

https://twitter.com/peckshield/status/1585587858978623491

https://twitter.com/solid_group_1/status/1585643249305518083

https://twitter.com/BeosinAlert/status/1585578499125178369

---

### 20221026 N00d Token - Reentrancy

### Lost $29k

Testing

```sh
forge test --contracts src/test/N00d_exp.sol -vvv
```

#### Contract

[N00d_exp.sol](src/test/N00d_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1584959295829180416

https://twitter.com/AnciliaInc/status/1584955717877784576

---

### 20221025 ULME - Access Control

### Lost ~250k US$ which resulted in ~50k profit

Testing

```sh
forge test --contracts ./src/test/ULME.sol -vvv
```

#### Contract

[ULME.sol](src/test/ULME.sol) | [ULME_exp2.sol](src/test/ULME_exp2.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1584839309781135361

https://twitter.com/BeosinAlert/status/1584888021299916801

https://medium.com/neptune-mutual/decoding-ulme-token-flash-loan-attack-56470d261787

---

### 20221024 Market - Read-only Reentrancy

### Lost: $220k

Testing

```sh
forge test --contracts ./src/test/Market_exp.t.sol -vv
```

#### Contract

[Market_exp.t.sol](src/test/Market_exp.t.sol)

#### Link reference

https://quillaudits.medium.com/decoding-220k-read-only-reentrancy-exploit-quillaudits-30871d728ad5

---

### 20221024 MulticallWithoutCheck - Arbitrary External Call Vulnerability

### Lost $600

Testing

```sh
forge test --contracts ./src/test/MulticallWithoutCheck_exp.sol -vvv
```

#### Contract

[MulticallWithoutCheck_exp.sol](src/test/MulticallWithoutCheck_exp.sol)

---

### 20221021 OlympusDAO - No input validation

### Lost ~$292K (30500 OHM)

Testing

```sh
forge test --contracts ./src/test/OlympusDao.exp.sol -vvv
```

#### Contract

[OlympusDao.exp.sol](src/test/OlympusDao.exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1583416829237526528

---

### 20221020 HEALTH - Transfer Logic Flaw

### Lost 16 BNB

Testing

```sh
forge test --contracts ./src/test/HEALTH_exp.sol -vvv
```

#### Contract

[HEALTH_exp.sol](src/test/HEALTH_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1583073442433495040

---

### 20221020 BEGO - Incorrect signature verification

### Lost 12 BNB

Testing

```sh
forge test --contracts ./src/test/BEGO_exp.sol -vvv
```

#### Contract

[BEGO_exp.sol](src/test/BEGO_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1582828751250784256

https://twitter.com/peckshield/status/1582892058800685058

---

### 20221018 HPAY - Access Control

### Lost: 115 BNB

Testing

```sh
forge test --contracts ./src/test/HPAY_exp.sol -vvv
```

#### Contract

[HPAY_exp.sol](src/test/HPAY_exp.sol)

#### Link reference

https://twitter.com/Supremacy_CA/status/1582345448190140417

---

### 20221018 PLTD - Transfer Logic Flaw

### Lost: $ 24k

Testing

```sh
forge test --contracts ./src/test/PLTD_exp.sol -vvv
```

#### Contract

[PLTD_exp.sol](src/test/PLTD_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1582181583343484928

---

### 20221017 Uerii Token - Access Control

### Lost: $2.4 k

Testing

```sh
forge test --contracts ./src/test/Uerii_exp.sol -vvv
```

#### Contract

[Uerii_exp.sol](src/test/Uerii_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1581988895142526976

---

### 20221014 INUKO - FlashLoan price manipulation

### Lost: $50k

Testing

```sh
forge test --contracts ./src/test/INUKO_exp.sol -vvv
```

#### Contract

[INUKO_exp.sol](src/test/INUKO_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1587848874076430336

---

### 20221014 EFLeverVault - Verify flashLoan Callback

### Lost: 750 ETH

Testing

```sh
 forge test --contracts ./src/test/EFLeverVault_exp.sol -vvv
```

#### Contract

[EFLeverVault_exp.sol](src/test/EFLeverVault_exp.sol)

#### Link reference

https://twitter.com/Supremacy_CA/status/1581012823701786624

https://twitter.com/MevRefund/status/1580917351217627136

https://twitter.com/danielvf/status/1580936010556661761

---

### 20221014 MEVBOTa47b - MEVBOT a47b

### Lost: $241 k

Testing

```sh
forge test --contracts ./src/test/MEVa47b_exp.sol -vvv
```

### Contract

[MEVa47b_exp.sol](src/test/MEVa47b_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1580779311862190080

https://twitter.com/AnciliaInc/status/1580705036400611328

https://etherscan.io/tx/0x35ecf595864400696853c53edf3e3d60096639b6071cadea6076c9c6ceb921c1

---

### 20221012 ATK - FlashLoan manipulate price

### Lost: $127 k

Testing

```sh
forge test --contracts ./src/test/ATK_exp.sol -vvv
```

#### Contract

[ATK_exp.sol](src/test/ATK_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1580095325200474112

---

### 20221011 Rabby Wallet SwapRouter - Arbitrary External Call Vulnerability

### Lost: ~200,000 US$

Testing

```sh
forge test --contracts src/test/RabbyWallet_SwapRouter.exp.sol -vv
```

#### Contract

[RabbyWallet_SwapRouter.exp.sol](src/test/RabbyWallet_SwapRouter.exp.sol)

#### Link reference

https://twitter.com/Supremacy_CA/status/1579813933669486592

https://twitter.com/SlowMist_Team/status/1579839744128978945

https://twitter.com/BeosinAlert/status/1579856733178331139

---

### 20221011 Templedao - Insufficient access control

### Lost: $2.3 million

Testing

```sh
forge test --contracts src/test/Templedao_exp.sol -vv
```

#### Contract

[Templedao_exp.sol](src/test/Templedao_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1579843881893769222

https://etherscan.io/tx/0x8c3f442fc6d640a6ff3ea0b12be64f1d4609ea94edd2966f42c01cd9bdcf04b5

---

### 20221010 Carrot - Public functionCall

Testing

```sh
forge test --contracts src/test/Carrot_exp.sol -vv
```

#### Contract

[Carrot_exp.sol](src/test/Carrot_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1579908411235237888

https://bscscan.com/tx/0xa624660c29ee97f3f4ebd36232d8199e7c97533c9db711fa4027994aa11e01b9

---

### 20221009 Xave Finance - Malicious Proposal Mint & Transfer Ownership

Testing

```sh
forge test --contracts src/test/XaveFinance_exp.sol -vv
```

#### Contract

[XaveFinance_exp.sol](src/test/XaveFinance_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1579040051853303808

https://etherscan.io/tx/0xc18ec2eb7d41638d9982281e766945d0428aaeda6211b4ccb6626ea7cff31f4a

---

### 20221006 RES-Token - pair manipulate

Testing

```sh
forge test --contracts src/test/RES_exp.sol -vv
```

#### Contract

[RES_exp.sol](src/test/RES_exp.sol)
[RES02_exp.sol](src/test/RES02_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1578119778446680064

https://bscscan.com/tx/0xe59fa48212c4ee716c03e648e04f0ca390f4a4fc921a890fded0e01afa4ba96d

---

### 20221002 Transit Swap - Incorrect owner address validation

Testing

```sh
forge test --contracts src/test/TransitSwap_exp.sol -vv
```

#### Contract

[TransitSwap_exp.sol](src/test/TransitSwap_exp.sol)

#### Link reference

https://twitter.com/TransitFinance/status/1576463550557483008

https://twitter.com/1nf0s3cpt/status/1576511552592543745

https://bscscan.com/tx/0x181a7882aac0eab1036eedba25bc95a16e10f61b5df2e99d240a16c334b9b189

---

### 20221001 BabySwap - Parameter Access Control

Testing

```sh
forge test --contracts ./src/test/BabySwap_exp.sol -vvv
```

#### Contract

[BabySwap_exp.sol](src/test/BabySwap_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1576441612812836865

---

### 20221001 RL Token - Incorrect Reward calculation

Testing

```sh
forge test --contracts src/test/RL_exp.sol -vv
```

#### Contract

[RL_exp.sol](src/test/RL_exp.sol)

#### Link reference

https://twitter.com/CertiKAlert/status/1576195971003858944

---

### 20221001 Thunder Brawl - Reentrancy

Testing

```sh
forge test --contracts src/test/THB_exp.sol -vv
```

#### Contract

[THB_exp.sol](src/test/THB_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1575890733373849601

https://bscscan.com/tx/0x57aa9c85e03eb25ac5d94f15f22b3ba3ab2ef60b603b97ae76f855072ea9e3a0

---

### 20220928 BXH - Flashloan & Price Oracle Manipulation

### Lost: $40,305

Testing

```sh
forge test --contracts src/test/BXH_exp.sol -vv
```

#### Contract

[BXH_exp.sol](src/test/BXH_exp.sol)

#### Link reference

https://www.jinse.com/lives/319392.html

https://bscscan.com/tx/0xa13c8c7a0c97093dba3096c88044273c29cebeee109e23622cd412dcca8f50f4

---

### 20220910 DPC - Incorrect Reward calculation

#### Lost: $103,755

Testing

```sh
forge test --contracts ./src/test/DPC_exp.sol -vvv
```

#### Contract

[DPC_exp.sol](src/test/DPC_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1568429355919089664

https://bscscan.com/address/0x2109bbecB0a563e204985524Dd3DB2F6254AB419

https://learnblockchain.cn/article/4733

---

### 20220928 MEVBOT - Badc0de

### Lost: $1,469,700

An anonymous attacker noticed a flaw in the bots arbitrage contract code, and stole not only the recently acquired 800 ETH, but the entire 1,101 ETH in 0xbad’s wallet.

Testing

```sh
forge test --contracts ./src/test/MEVbadc0de_exp.sol -vvv
```

#### Contract

[MEVbadc0de_exp.sol](src/test/MEVbadc0de_exp.sol)

#### Link reference

https://rekt.news/ripmevbot/

https://etherscan.io/tx/0x59ddcf5ee5c687af2cbf291c3ac63bf28316a8ecbb621d9f62d07fa8a5b8ef4e

---

### 20220923 RADT-DAO - pair manipulate

#### Lost: 94,304 USDT

Testing

```sh
forge test --contracts ./src/test/RADT_exp.sol -vvv
```

#### Contract

[RADT_exp.sol](src/test/RADT_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1573252869322846209

https://bscscan.com/tx/0xd692f71de2768017390395db815d34033013136c378177c05d0d46ef3b6f0897

---

### 20220913 MevBot private tx

### Lost: $140 K

Testing

```sh
forge test --contracts ./src/test/BNB48MEVBot_exp.sol -vvv
```

#### Contract

[BNB48MEVBot_exp.sol](src/test/BNB48MEVBot_exp.sol)

#### Link reference

https://blocksecteam.medium.com/the-two-sides-of-the-private-tx-service-on-binance-smart-chain-a76917c3ce51

https://twitter.com/1nf0s3cpt/status/1577594615104172033

https://bscscan.com/tx/0xd48758ef48d113b78a09f7b8c7cd663ad79e9965852e872fdfc92234c3e598d2

---

### 20220909 YYDS - pair manipulate

#### Lost: 742,286.27 BUSD

Testing

```sh
forge test --contracts ./src/test/Yyds_exp.sol -vvv
```

#### Contract

[Yyds_exp.sol](src/test/Yyds_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1567928377432051713

https://bscscan.com/tx/0x04a1f0d1694242515ecb14faa71053901f11a1286cd21c27fe5542f9eeb62356

---

### 20220908 Ragnarok Online Invasion - Broken Access Control

#### Lost: 157.98 BNB (~44,000 US$)

Testing

```sh
forge test --contracts ./src/test/ROI_exp.sol -vvv
```

#### Contract

[ROI_exp.sol](src/test/ROI_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1567746825616236544

https://twitter.com/CertiKAlert/status/1567754904663429123

https://www.panewslab.com/zh_hk/articledetails/mbzalpdi.html

https://medium.com/quillhash/decoding-ragnarok-online-invasion-44k-exploit-quillaudits-261b7e23b55

---

### 20220908 NewFreeDAO - Flashloans Attack

#### Lost: 1M US$

Testing

```sh
forge test --contracts ./src/test/NewFreeDAO_exp.sol -vvv
```

#### Contract

[NewFreeDAO_exp.sol](src/test/NewFreeDAO_exp.sol)

#### Link reference

https://twitter.com/SlowMist_Team/status/1567854876633309186

https://bscscan.com/tx/0x1fea385acf7ff046d928d4041db017e1d7ead66727ce7aacb3296b9d485d4a26

---

### 20220906 NXUSD - flashloan price oracle manipulation

#### Lost 50,000 USD

Testing

```sh
forge test --contracts ./src/test/NXUSD_exp.sol -vvv
```

#### Contract

[NXUSD_exp.sol](src/test/NXUSD_exp.sol)

#### Link reference

https://medium.com/nereus-protocol/post-mortem-flash-loan-exploit-in-single-nxusd-market-343fa32f0c6

https://snowtrace.io/tx/0x0ab12913f9232b27b0664cd2d50e482ad6aa896aeb811b53081712f42d54c026

---

### 20220905 ZoomproFinance - Flashloans & Price Manipulation

#### Lost: 61,160 USDT

Testing

```sh
forge test --contracts ./src/test/ZoomproFinance_exp.sol -vvv
```

#### Contract

[ZoomproFinance_exp.sol](src/test/ZoomproFinance_exp.sol)

#### Link reference

https://twitter.com/blocksecteam/status/1567027459207606273

https://bscscan.com/tx/0xe176bd9cfefd40dc03508e91d856bd1fe72ffc1e9260cd63502db68962b4de1a

---

### 20220902 ShadowFi - Access Control

#### Lost: 1,078 BNB

Anyone can burn $SDF

Testing

```sh
forge test --contracts ./src/test/Shadowfi_exp.sol -vvv
```

#### Contract

[Shadowfi_exp.sol](src/test/Shadowfi_exp.sol)

#### Link reference

https://twitter.com/PeckShieldAlert/status/1565549688509861888

https://bscscan.com/tx/0xe30dc75253eecec3377e03c532aa41bae1c26909bc8618f21fb83d4330a01018

---

### 20220902 Bad Guys by RPF - Business Logic Flaw : Missing Check For Number of NFT to Mint

#### Lost: Bad Guys by RPF(400 NFTs)

Testing

```sh
forge test --contracts ./src/test/BadGuysbyRPF_exp.sol -vvv
```

#### Contract

[BadGuysbyRPF_exp.sol](src/test/BadGuysbyRPF_exp.sol)

#### Link reference

https://twitter.com/RugDoctorApe/status/1565739119606890498

https://etherscan.io/tx/0x27e64a8215ae1528245c912bcca09883fdd7cce69249bd5d5d1c0eecf5297b96

---

### 20220824 LuckyTiger NFT - Predicting Random Numbers

Testing

```sh
forge test --contracts ./src/test/LuckyTiger_exp -vvv
forge script script/LuckyTiger_s_exp.sol:luckyHack --fork-url http://127.0.0.1:8545 --private-key $PRIVATE_KEY --broadcast
```

#### Contract

[LuckyTiger_exp.sol](src/test/LuckyTiger_exp.sol) | [LuckyTiger_s_exp.sol](/script/LuckyTiger_s_exp.sol)

#### Link reference

https://twitter.com/1nf0s3cpt/status/1576117129589317633

https://etherscan.io/tx/0x804ff3801542bff435a5d733f4d8a93a535d73d0de0f843fd979756a7eab26af

---

### 20220810 XSTABLE Protocol - Incorrect Logic Check

Testing

```sh
forge test --contracts ./src/test/XST.exp.sol -vvv
```

#### Contract

[XST.exp.sol](src/test/XST.exp.sol)
[XST02_exp.sol](src/test/XST02_exp.sol)

#### Link reference

https://mobile.twitter.com/BlockSecTeam/status/1557195012042936320

---

### 20220809 ANCH - Skim token balance

Testing

```sh
forge test --contracts ./src/test/ANCH_exp.sol -vvv
```

#### Contract

[ANCH_exp.sol](src/test/ANCH_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1557527183966408706

---

### 20220807 EGD Finance - Flashloans & Price Manipulation

#### Lost: 36,044 USDT

Testing

```sh
forge test --contracts ./src/test/EGD-Finance.exp.sol -vvv
```

#### Contract

[EGD-Finance.exp.sol](src/test/EGD-Finance.exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1556483435388350464

https://twitter.com/PeckShieldAlert/status/1556486817406283776

---

### 20220802 Nomad Bridge - Business Logic Flaw : Incorrect acceptable merkle-root checks

#### Lost: Multiple ERC-20 Tokens (~152M US$)

Testing

```sh
forge test --contracts ./src/test/NomadBridge.exp.sol -vvv
```

#### Contract

[NomadBridge.exp.sol](src/test/NomadBridge.exp.sol)

#### Link reference

https://twitter.com/samczsun/status/1554252024723546112

https://www.certik.com/resources/blog/28fMavD63CpZJOKOjb9DX3-nomad-bridge-exploit-incident-analysis

https://blog.coinbase.com/nomad-bridge-incident-analysis-899b425b0f34

---

### 20220801 Reaper Farm - Business Logic Flaw : Lack of access control mechanism

#### Lost: Multiple ERC-20 Tokens (~1.7M US$)

Testing

```sh
forge test --contracts ./src/test/ReaperFarm.exp.sol -vvv
```

#### Contract

[ReaperFarm.exp.sol](src/test/ReaperFarm.exp.sol)

#### Link reference

https://twitter.com/Reaper_Farm/status/1554500909740302337

https://twitter.com/BeosinAlert/status/1554476940593340421

---

### 20220725 LPC - Business Logic Flaw : Incorrect recipient balance check, did not check sender!=recipient in transfer

#### Lost: 178 BNB (~45,715 US$)

Testing

```sh
forge test --contracts ./src/test/LPC.exp.sol -vvv
```

#### Contract

[LPC.exp.sol](src/test/LPC.exp.sol)

#### Link reference

https://www.panewslab.com/zh_hk/articledetails/uwv4sma2.html

https://twitter.com/BeosinAlert/status/1551535854681718784

---

### 20220723 Audius - Storage Collision & Malicious Proposal

#### Lost: 704 ETH (~1.08M US$)

Testing

```sh
forge test --contracts ./src/test/Audius.exp.sol -vvv
```

#### Contract

[Audius.exp.sol](src/test/Audius.exp.sol)

#### Link reference

https://twitter.com/AudiusProject/status/1551000725169180672

https://twitter.com/1nf0s3cpt/status/1551050841146400768

https://blog.audius.co/article/audius-governance-takeover-post-mortem-7-23-22

---

### 20220713 SpaceGodzilla - Flashloans & Price Manipulation

#### Lost: 25,378 BUSD

Testing

```sh
forge test --contracts ./src/test/SpaceGodzilla.exp.sol -vvv
```

#### Contract

[SpaceGodzilla.exp.sol](src/test/SpaceGodzilla.exp.sol)

#### Link reference

https://mobile.twitter.com/BlockSecTeam/status/1547456591900749824

https://medium.com/numen-cyber-labs/spacegodzilla-attack-event-analysis-d29a061b17e1

https://learnblockchain.cn/article/4396

https://learnblockchain.cn/article/4395 \*\*\* math behind such attack

---

### 20220710 Omni NFT - Reentrancy

#### Lost: $1.4M

Testing

```sh
forge test --contracts ./src/test/Omni_exp.sol -vv
```

#### Contract

[Omni_exp.sol](src/test/Omni_exp.sol)

#### Link reference

https://twitter.com/SlowMist_Team/status/1546379086792388609

https://etherscan.io/tx/0x05d65e0adddc5d9ccfe6cd65be4a7899ebcb6e5ec7a39787971bcc3d6ba73996

---

### 20220706 FlippazOne NFT - Access control

The ownerWithdrawAllTo() without onlyOwner can call it.

Testing

```sh
forge test --contracts ./src/test/FlippazOne.sol -vvvv
```

#### Contract

[FlippazOne.sol](src/test/FlippazOne.sol)

#### Link reference

https://twitter.com/bertcmiller/status/1544496577338826752

https://etherscan.io/tx/0x8bded20c1db5a1d5f595b15e682a95ce11d3c895d6031147fa49c4ffa5729a30

---

### 20220701 Quixotic - Optimism NFT Marketplace

#### Lost: $100K

fillSellOrder function only check seller signature.

ECDSA signature combined with v r s, if recoveredAddress == sellOrder.seller; sellorder execute.

Testing

```sh
forge test --contracts ./src/test/Quixotic_exp.sol -vv
```

#### Contract

[Quixotic_exp.sol](src/test/Quixotic_exp.sol)

#### Link reference

https://twitter.com/1nf0s3cpt/status/1542808565349777408

https://twitter.com/SlowMist_Team/status/1542795627603857409

https://optimistic.etherscan.io/tx/0x5dc519726e1236eb846271f6699e03cdd1a8fd593a2900c71cd2aabbdb7c92e6

---

### 20220626 XCarnival - Infinite Number of Loans

#### Lost: 3087 ETH (~$3.87M)

Testing

```sh
forge test --contracts ./src/test/XCarnival.exp.sol -vv
```

#### Contract

[XCarnival.exp.sol](src/test/XCarnival.exp.sol)

#### Link reference

https://twitter.com/XCarnival_Lab/status/1541226298399653888

https://twitter.com/peckshield/status/1541047171453034501

https://twitter.com/BlockSecTeam/status/1541070850505723905

---

### 20220624 Harmony's Horizon Bridge - Private key compromised

#### Lost: $100 million

Private key compromised case of Multisig wallet

Testing

```sh
forge test --contracts ./src/test/Harmony_multisig.sol -vvvv
```

#### Contract

[Harmony_multisig.sol](src/test/Harmony_multisig.sol)

#### Link reference

https://twitter.com/harmonyprotocol/status/1540110924400324608

https://twitter.com/0xIvo/status/1540165571681128448

https://twitter.com/1nf0s3cpt/status/1540139812715261952

---

### 20220618 SNOOD - Miscalculation on \_spendAllowance

#### Lost: 104 ETH

On `_spendAllowance` function they use `_getStandardAmount` and should be `_getReflectedAmount`

Testing

```sh
forge test --contracts ./src/test/Snood_poc.t.sol -vv
```

#### Contract

[Snood_poc.t.sol](src/test/Snood_poc.t.sol)

#### Link reference

https://ethereum.stackexchange.com/questions/130472/attack-on-erc-777-smart-contract-and-uniswapv2pair-resulting-in-104-eth-liquidit

https://etherscan.io/tx/0x9a6227ef97d7ce75732645bd604ef128bb5dfbc1bfbe0966ad1cd2870d45a20e

https://ethtx.info/mainnet/0x9a6227ef97d7ce75732645bd604ef128bb5dfbc1bfbe0966ad1cd2870d45a20e/

---

### 20220616 InverseFinance - Flashloan & Price Oracle Manipulation

#### Lost: 53.2445 WBTC and 99,976.29 USDT

Testing

```sh
forge test --contracts ./src/test/InverseFinance_exp.sol -vv
```

#### Contract

[InverseFinance_exp.sol](src/test/InverseFinance_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1537382891230883841

https://twitter.com/SlowMist_Team/status/1537602909512376321

https://blocksecteam.medium.com/price-oracle-manipulation-attack-on-inverse-finance-a5544218ea91

https://www.certik.com/resources/blog/6LbL57WA3iMNm8zd7q111R-inverse-finance-incident-analysis

https://etherscan.io/tx/0x958236266991bc3fe3b77feaacea120f172c0708ad01c7a715b255f218f9313c

---

### 20220608 GYMNetwork - Access control

#### Lost: $2.1 million

Testing

```sh
forge test --contracts ./src/test/Gym_2_exp.sol -vv
```

#### Contract

[Gym_2_exp.sol](src/test/Gym_2_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1534423219607719936

https://twitter.com/1nf0s3cpt/status/1534464698069884929

https://www.jinse.com/news/blockchain/1658455.html

---

### 20220608 Optimism - Wintermute - Signature replay

#### Lost: 20 million Optimism (OP) tokens returned 17 million of them

Testing

```sh
forge test --contracts ./src/test/Optimism_exp.sol -vv
```

#### Contract

[Optimism_exp.sol](src/test/Optimism_exp.sol)

#### Link reference

https://inspexco.medium.com/how-20-million-op-was-stolen-from-the-multisig-wallet-not-yet-owned-by-wintermute-3f6c75db740a

https://optimistic.etherscan.io/tx/0x75a42f240d229518979199f56cd7c82e4fc1f1a20ad9a4864c635354b4a34261

https://optimistic.etherscan.io/tx/0x00a3da68f0f6a69cb067f09c3f7e741a01636cbc27a84c603b468f65271d415b

---

### 20220606 Discover - Flashloan & Price Oracle Manipulation

#### Lost: 49 BNB

Testing

```sh
forge test --contracts ./src/test/Discover_exp.sol -vv
```

#### Contract

[Discover_exp.sol](src/test/Discover_exp.sol)

#### Link reference

https://www.twitter.com/BeosinAlert/status/1533734518623899648

https://www.anquanke.com/post/id/274003

https://bscscan.com/tx/0x8a33a1f8c7af372a9c81ede9e442114f0aabb537e5c3a22c0fd7231c4820f1e9

https://bscscan.com/tx/0x1dd4989052f69cd388f4dfbeb1690a3f3a323ebb73df816e5ef2466dc98fa4a4

---

### 20220529 NOVO Protocol - Flashloan & Price Oracle Manipulation

#### Lost: 279 BNB

Testing

```sh
forge test --contracts ./src/test/Novo_exp.sol -vvv
```

#### Contract

[Novo_exp.sol](src/test/Novo_exp.sol)

#### Link reference

https://www.panewslab.com/zh_hk/articledetails/f40t9xb4.html

https://bscscan.com/tx/0xc346adf14e5082e6df5aeae650f3d7f606d7e08247c2b856510766b4dfcdc57f

https://bscscan.com/address/0xa0787daad6062349f63b7c228cbfd5d8a3db08f1#code

---

### 20220524 HackDao - Skim token balance

Testing

```sh
forge test --contracts ./src/test/HackDao_exp.sol -vvv
```

#### Contract

[HackDao_exp.sol](src/test/HackDao_exp.sol)

### Link reference

https://twitter.com/BlockSecTeam/status/1529084919976034304

---

### 20220517 ApeCoin (APE) - Flashloan

#### Lost: $1.1 million

buys vault token -> redeems NFTs -> claims airdrop of 60k APE -> re-supply's the pool
Testing

```sh
forge test --contracts ./src/test/Bayc_apecoin_exp.sol -vvv
```

#### Contract

[Bayc_apecoin_exp.sol](src/test/Bayc_apecoin_exp.sol)

#### Link reference

https://etherscan.io/tx/0xeb8c3bebed11e2e4fcd30cbfc2fb3c55c4ca166003c7f7d319e78eaab9747098

https://news.coincu.com/73892-the-flashloan-attack-on-the-ape-airdrop-to-claim-1-1-million-of-ape-tokens/

---

### 20220508 Fortress Loans - Malicious Proposal & Price Oracle Manipulation

#### Lost: 1,048.1 ETH + 400,000 DAI (~$3.00M)

Testing

```sh
forge test --contracts ./src/test/FortressLoans.exp.sol -vvv
```

#### Contract

[FortressLoans.exp.sol](src/test/FortressLoans.exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1523530484877209600

https://www.certik.com/resources/blog/k6eZOpnK5Kdde7RfHBZgw-fortress-loans-exploit

---

### 20220430 Saddle Finance - Swap Metapool Attack

### Lost: $10 million

Testing

```sh
forge test --contracts ./src/test/Saddle_exp.sol -vvv
```

#### Contract

[Saddle_exp.sol](src/test/Saddle_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1520330006710616064

https://medium.com/immunefi/hack-analysis-saddle-finance-april-2022-f2bcb119f38

https://github.com/Hephyrius/Immuni-Saddle-POC

---

### 20220430 Rari Capital/Fei Protocol - Flashloan Attack + Reentrancy

#### Lost: $80 million

Testing

```sh
forge test --contracts ./src/test/Rari_exp.t.sol -vv
```

#### Contract

[Rari_exp.t.sol](src/test/Rari_exp.t.sol)

#### Link reference

https://certik.medium.com/fei-protocol-incident-analysis-8527440696cc

https://twitter.com/peckshield/status/1520369315698016256

https://etherscan.io/tx/0xab486012f21be741c9e674ffda227e30518e8a1e37a5f1d58d0b0d41f6e76530

---

### 20220424 Wiener DOGE - Flashloan

#### Lost: 78 BNB

Testing

```sh
forge test --contracts ./src/test/Wdoge_exp.sol -vvv

```

#### Contract

[Wdoge_exp.sol](src/test/Wdoge_exp.sol)

#### Link reference

https://coinyuppie.com/four-combinations-of-hackers-analysis-of-attacks-on-wiener-doge-last-kilometer-medamon-and-pidao-projects/

https://twitter.com/solid_group_1/status/1519034573354676224

https://bscscan.com/tx/0x4f2005e3815c15d1a9abd8588dd1464769a00414a6b7adcbfd75a5331d378e1d

---

### 20220428 DEUS DAO - Flashloan & Price Oracle Manipulation

#### Lost: $13 million

Testing

```sh
forge test --contracts ./src/test/deus_exp.sol -vv
```

#### Contract

[deus_exp.sol](src/test/deus_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1519531866109317121

https://ftmscan.com/tx/0xe374495036fac18aa5b1a497a17e70f256c4d3d416dd1408c026f3f5c70a3a9c

---

### 20220423 Akutar NFT - Denial of Service

#### Lost: 34M USD

Testing

```sh
forge test --contracts ./src/test/AkutarNFT_exp.sol -vv
```

#### Contract

[AkutarNFT_exp.sol](src/test/AkutarNFT_exp.sol)

#### Link reference

https://blocksecteam.medium.com/how-akutar-nft-loses-34m-usd-60d6cb053dff

https://etherscan.io/address/0xf42c318dbfbaab0eee040279c6a2588fa01a961d#code

---

### 20220421 Zeed Finance - Reward distribution flaw

#### Lost: $1 million

Testing

```sh
forge test --contracts ./src/test/Zeed_exp.sol -vv
```

#### Contract

[Zeed_exp.sol](src/test/Zeed_exp.sol)

#### Link reference

https://www.cryptotimes.io/hacker-leaves-1m-to-self-destruct-after-zeed-protocol-exploit/

https://medium.com/@zeedcommunity/the-solution-for-the-yeed-lp-pool-attack-a120c53948cd

https://bscscan.com/tx/0x0507476234193a9a5c7ae2c47e4c4b833a7c3923cefc6fd7667b72f3ca3fa83a

---

### 20220416 BeanstalkFarms - DAO + Flashloan

#### Lost: $182 million

Testing

```sh
forge test --contracts ./src/test/Beanstalk_exp.sol -vv
```

#### Contract

[Beanstalk_exp.sol](src/test/Beanstalk_exp.sol)

#### Link reference

https://rekt.news/beanstalk-rekt/

https://medium.com/uno-re/beanstalk-farms-hacked-total-damage-is-182-million-b699dd3e5c8

https://twitter.com/peckshield/status/1515680335769456640

https://etherscan.io/tx/0x68cdec0ac76454c3b0f7af0b8a3895db00adf6daaf3b50a99716858c4fa54c6f

https://etherscan.io/tx/0xcd314668aaa9bbfebaf1a0bd2b6553d01dd58899c508d4729fa7311dc5d33ad7

---

### 20220415 Rikkei Finance - Access control & Price Oracle Manipulation

#### Lost: $1.1 million (2671 BNB)

Testing

```sh
forge test --contracts ./src/test/Rikkei_exp.sol -vv
```

#### Contract

[Rikkei_exp.sol](src/test/Rikkei_exp.sol)

#### Link reference

https://blockmagnates.com/rikkei-finance-hack/

https://knownseclab.com/news/625e865cf1c544005a4bdaf2

https://rikkeifinance.medium.com/rikkei-finance-incident-investigation-report-b5b1745b0155

https://bscscan.com/tx/0x93a9b022df260f1953420cd3e18789e7d1e095459e36fe2eb534918ed1687492

---

### 20220412 ElephantMoney - Flashloan & Price Oracle Manipulation

#### Lost: $11.2 million (27,416.46 BNB)

Testing

```sh
forge test --contracts ./src/test/Elephant_Money_poc.sol -vv
```

#### Contract

[Elephant_Money_poc.sol](src/test/Elephant_Money_poc.sol)

#### Link reference

https://medium.com/elephant-money/reserve-exploit-52fd36ccc7e8

https://twitter.com/peckshield/status/1514023036596330496

https://twitter.com/BlockSecTeam/status/1513966074357698563

https://bscscan.com/tx/0xec317deb2f3efdc1dbf7ed5d3902cdf2c33ae512151646383a8cf8cbcd3d4577

---

### 20220411 Creat Future

#### Lost: $1.9 million

Testing

```sh
forge test --contracts ./src/test/cftoken_exp.sol -vv
```

#### Contract

[cftoken_exp.sol](src/test/cftoken_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1556497016016228358

https://bscscan.com/tx/0xc7647406542f8f2473a06fea142d223022370aa5722c044c2b7ea030b8965dd0

---

### 20220409 GYMNetwork - Flashloan + token migrate flaw

#### Lost: 1,327 WBNB

Testing

```sh
forge test --contracts ./src/test/Gym_1_exp.sol -vv
```

#### Contract

[Gym_1_exp.sol](src/test/Gym_1_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1512832398643265537

https://medium.com/@Beosin_com/beosin-analysis-of-the-attack-on-gymdefi-e5a23bfd93fe

https://bscscan.com/tx/0xa5b0246f2f8d238bb56c0ddb500b04bbe0c30db650e06a41e00b6a0fff11a7e5

---

### 20220329 Ronin Network - Bridge

#### Lost: $624 million

Testing

```sh
forge test --contracts ./src/test/Ronin_exp.sol -vv
```

#### Contract

[Ronin_exp.sol](src/test/Ronin_exp.sol)

#### Link reference

https://rekt.news/ronin-rekt/

https://etherscan.io/tx/0xc28fad5e8d5e0ce6a2eaf67b6687be5d58113e16be590824d6cfa1a94467d0b7

https://etherscan.io/tx/0xed2c72ef1a552ddaec6dd1f5cddf0b59a8f37f82bdda5257d9c7c37db7bb9b08

---

### 20220329 Redacted Cartel - Custom Approval Logic

Testing

```sh
forge test --contracts ./src/test/RedactedCartel_exp.sol -vv
```

#### Contract

[RedactedCartel_exp.sol](src/test/RedactedCartel_exp.sol)

#### Link reference

https://medium.com/immunefi/redacted-cartel-custom-approval-logic-bugfix-review-9b2d039ca2c5

---

### 20230328 SafeMoon Hack

#### Lost: $8.9M

Testing

```sh
forge test --contracts ./src/test/safeMoon_exp.sol -vvvv
```

#### Contract

[safeMoon_exp.sol](src/test/safeMoon_exp.sol)

#### Link reference

https://twitter.com/zokyo_io/status/1641014520041840640

---

### 20220327 Revest Finance - Reentrancy

#### Lost: $11.2 million

Testing

```sh
forge test --contracts ./src/test/Revest_exp.sol -vv
```

#### Contract

[Revest_exp.sol](src/test/Revest_exp.sol)

#### Link reference

https://blocksecteam.medium.com/revest-finance-vulnerabilities-more-than-re-entrancy-1609957b742f

https://etherscan.io/tx/0xe0b0c2672b760bef4e2851e91c69c8c0ad135c6987bbf1f43f5846d89e691428

---

### 20220326 Auctus

#### Lost: $726 k

Testing

```sh
forge test --contracts ./src/test/Auctus_exp.sol -vv
```

#### Contract

[Auctus_exp.sol](src/test/Auctus_exp.sol)

#### Link reference

https://twitter.com/AuctusOptions/status/1508647849663291398?cxt=HHwWjICzpbzO5e8pAAAA

https://etherscan.io/tx/0x2e7d7e7a6eb157b98974c8687fbd848d0158d37edc1302ea08ee5ddb376befea

---

### 20220322 CompoundTUSDSweepTokenBypass

Testing

```sh
forge test --contracts ./src/test/CompoundTusd_exp.sol -vv
```

#### Contract

[CompoundTusd_exp.sol](src/test/CompoundTusd_exp.sol)

#### Link reference

https://blog.openzeppelin.com/compound-tusd-integration-issue-retrospective/

---

### 20220321 OneRing Finance - Flashloan & Price Oracle Manipulation

#### Lost: $1.45 million

Testing

```sh
forge test --contracts ./src/test/OneRing_exp.sol -vv
```

#### Contract

[OneRing_exp.sol](src/test/OneRing_exp.sol)

#### Link reference

https://medium.com/oneringfinance/onering-finance-exploit-post-mortem-after-oshare-hack-602a529db99b

https://ftmscan.com/tx/0xca8dd33850e29cf138c8382e17a19e77d7331b57c7a8451648788bbb26a70145

---

### 20220320 Li.Fi - Bridges

#### Lost: $570K

Testing

```sh
forge test --contracts ./src/test/LiFi_exp.sol -vvvv
```

#### Contract

[LiFi_exp.sol](src/test/LiFi_exp.sol)

#### Link reference

https://blog.li.fi/20th-march-the-exploit-e9e1c5c03eb9

https://twitter.com/lifiprotocol/status/1505738407938387971

https://etherscan.io/tx/0x4b4143cbe7f5475029cf23d6dcbb56856366d91794426f2e33819b9b1aac4e96

#### Fix

implemented a whitelist to only allow calls to approved DEXs.

---

### 20220320 Umbrella Network - Underflow

Testing

```sh
forge test --contracts ./src/test/Umbrella_exp.sol -vv
```

#### Contract

[Umbrella_exp.sol](src/test/Umbrella_exp.sol)

#### Link reference

https://medium.com/uno-re/umbrella-network-hacked-700k-lost-97285b69e8c7

https://etherscan.io/tx/0x33479bcfbc792aa0f8103ab0d7a3784788b5b0e1467c81ffbed1b7682660b4fa

---

### 20220313 Hundred Finance - ERC667 Reentrancy

#### Lost: $1.7 million

Testing

```sh
forge test --contracts ./src/test/HundredFinance_exp.sol -vv
```

#### Contract

[HundredFinance_exp.sol](src/test/HundredFinance_exp.sol)

#### Link reference

https://medium.com/immunefi/a-poc-of-the-hundred-finance-heist-4121f23a098

https://gnosisscan.io/tx/0x534b84f657883ddc1b66a314e8b392feb35024afdec61dfe8e7c510cfac1a098

---

### 20220313 Paraluni - Flashloan & Reentrancy

#### Lost: $1.7 million

Testing

```sh
forge test --contracts ./src/test/Paraluni_exp.sol -vv
```

#### Contract

[Paraluni_exp.sol](src/test/Paraluni_exp.sol)

#### Link reference

https://halborn.com/explained-the-paraluni-hack-march-2022/

https://twitter.com/peckshield/status/1502815435498176514

https://mobile.twitter.com/paraluni/status/1502951606202994694

https://zhuanlan.zhihu.com/p/517535530

https://bscscan.com/tx/0x70f367b9420ac2654a5223cc311c7f9c361736a39fd4e7dff9ed1b85bab7ad54

---

### 20220309 Fantasm Finance - Business logic in mint()

#### Lost: $2.6 million

Testing

```sh
forge test --contracts ./src/test/Fantasm_exp.sol -vv
```

#### Contract

[Fantasm_exp.sol](src/test/Fantasm_exp.sol)

#### Link reference

https://twitter.com/fantasm_finance/status/1501569232881995785

https://medium.com/quillhash/fantom-based-protocol-fantasm-suffers-2-6m-exploit-32de8191ccd4

https://www.certik.com/resources/blog/5p92144WQ44Ytm1AL4Jt9X-fantasm-finance

---

### 20220305 Bacon Protocol - Reentrancy

#### Lost: $1 million

Testing

```sh
forge test --contracts ./src/test/Bacon_exp.sol -vv
```

#### Contract

[Bacon_exp.sol](src/test/Bacon_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1500105933128495108

https://etherscan.io/tx/0xacfcaa8e1c482148f9f2d592c78ca7a27934c7333dab31978ed0aef333a28ab6

https://etherscan.io/tx/0x7d2296bcb936aa5e2397ddf8ccba59f54a178c3901666b49291d880369dbcf31

---

### 20220303 TreasureDAO - Zero Fee

#### Lost: $1 million

Testing

```sh
forge test --contracts ./src/test/TreasureDAO_exp.sol -vv
```

#### Contract

[TreasureDAO_exp.sol](src/test/TreasureDAO_exp.sol)

#### Link reference

https://slowmist.medium.com/analysis-of-the-treasuredao-zero-fee-exploit-73791f4b9c14

https://arbiscan.io/tx/0x82a5ff772c186fb3f62bf9a8461aeadd8ea0904025c3330a4d247822ff34bc02

---

### 20220214 BuildFinance - DAO

#### Lost: $470k

Testing

```sh
forge test --contracts ./src/test/BuildF_exp.sol -vv
```

#### Contract

[BuildF_exp.sol](src/test/BuildF_exp.sol)

#### Link reference

https://twitter.com/finance_build/status/1493223190071554049

https://www.cryptotimes.io/build-finance-suffered-hostile-governance-takeover-lost-470k/

https://etherscan.io/tx/0x544e5849b71b98393f41d641683586d0b519c46a2eeac9bcb351917f40258a85

---

### 20220208 Sandbox LAND - Access control

Testing

```sh
forge test --contracts ./src/test/Sandbox_exp.sol -vv
```

#### Contract

[Sandbox_exp.sol](src/test/Sandbox_exp.sol)

#### Link reference

https://slowmist.medium.com/the-vulnerability-behind-the-sandbox-land-migration-2abf68933170

https://etherscan.io/tx/0x34516ee081c221d8576939f68aee71e002dd5557180d45194209d6692241f7b1

---

### 20220206 Meter - Bridge

#### Lost: $4.3 million

Testing

```sh
Solana TBD
forge test --contracts ./src/test/meter_exp.sol -vv
```

#### Contract

[meter_exp.sol](src/test/meter_exp.sol)

#### Link reference

https://twitter.com/ishwinder/status/1490227406824685569

https://blog.chainsafe.io/breaking-down-the-meter-io-hack-a46a389e7ae4

this does not seem to be the correct transaction though:
https://moonriver.moonscan.io/tx/0x5a87c24d0665c8f67958099d1ad22e39a03aa08d47d00b7276b8d42294ee0591

---

### 20220128 Qubit Finance - Bridge address(0).safeTransferFrom() does not revert

#### Lost: $80 million

Testing

```sh
forge test --contracts ./src/test/Qubit_exp.sol -vv
```

#### Contract

[Qubit_exp.sol](src/test/Qubit_exp.sol)

#### Link reference

https://rekt.news/qubit-rekt/

https://medium.com/@QubitFin/protocol-exploit-report-305c34540fa3

https://etherscan.io/address/0xd01ae1a708614948b2b5e0b7ab5be6afa01325c7
https://etherscan.io/tx/0xac7292e7d0ec8ebe1c94203d190874b2aab30592327b6cc875d00f18de6f3133
https://bscscan.com/tx/0x50946e3e4ccb7d39f3512b7ecb75df66e6868b9af0eee8a7e4b61ef8a459518e

---

### 20220118 Multichain (Anyswap) - Insufficient Token Validation

#### Lost: $1.4 million

Testing

```sh
forge test --contracts ./src/test/Anyswap_poc.t.sol -vv
```

#### Contract

[Anyswap_poc.t.sol](src/test/Anyswap_poc.t.sol)

#### Link reference

https://medium.com/zengo/without-permit-multichains-exploit-explained-8417e8c1639b

https://twitter.com/PeckShieldAlert/status/1483363515411099651

https://etherscan.io/tx/0xe50ed602bd916fc304d53c4fed236698b71691a95774ff0aeeb74b699c6227f7

---

</details>
<details> <summary> 2021 </summary>

### 20211221 Visor Finance - Reentrancy

#### Lost: $8.2 million

Testing

```sh
forge test --contracts ./src/test/Visor_exp.t.sol -vv
```

#### Contract

[Visor_exp.t.sol](src/test/Visor_exp.t.sol)

#### Link reference

https://beosin.medium.com/two-vulnerabilities-in-one-function-the-analysis-of-visor-finance-exploit-a15735e2492

https://twitter.com/GammaStrategies/status/1473306777131405314

https://etherscan.io/tx/0x69272d8c84d67d1da2f6425b339192fa472898dce936f24818fda415c1c1ff3f

---

### 20211218 Grim Finance - Flashloan & Reentrancy

#### Lost: $30 million

Testing

```sh
forge test --contracts ./src/test/Grim_exp.sol -vv
```

#### Contract

[Grim_exp.sol](src/test/Grim_exp.sol)

#### Link reference

https://cointelegraph.com/news/defi-protocol-grim-finance-lost-30m-in-5x-reentrancy-hack

https://rekt.news/grim-finance-rekt/

https://ftmscan.com/tx/0x19315e5b150d0a83e797203bb9c957ec1fa8a6f404f4f761d970cb29a74a5dd6

---

### 20211214 Nerve Bridge - Swap Metapool Attack

#### Lost: 900 BNB

Testing

```sh
forge test --contracts ./src/test/NerveBridge.t.sol -vv
```

#### Contract

[NerveBridge.t.sol](src/test/NerveBridge.t.sol)

#### Link reference

https://blocksecteam.medium.com/the-analysis-of-nerve-bridge-security-incident-ead361a21025

---

### 20211130 MonoX Finance - Price Manipulation

#### Lost: $31 million

Testing

```sh
forge test --contracts ./src/test/Mono_exp.t.sol -vv
```

#### Contract

[Mono_exp.t.sol](src/test/Mono_exp.t.sol)

#### Link reference

https://slowmist.medium.com/detailed-analysis-of-the-31-million-monox-protocol-hack-574d8c44a9c8

https://knownseclab.com/news/61a986811992da0067558749

https://www.tuoniaox.com/news/p-521076.html

https://polygonscan.com/tx/0x5a03b9c03eedcb9ec6e70c6841eaa4976a732d050a6218969e39483bb3004d5d

https://etherscan.io/tx/0x9f14d093a2349de08f02fc0fb018dadb449351d0cdb7d0738ff69cc6fef5f299

---

### 20211027 CreamFinance - Price Manipulation

#### Lost: $130M

Testing

```sh
 forge test --contracts ./src/test/Cream_2_exp.sol -vvv
```

#### Contract

[Cream_2_exp.sol](src/test/Cream_2_exp.sol)

#### Link reference

https://medium.com/immunefi/hack-analysis-cream-finance-oct-2021-fc222d913fc5

---

### 20211015 Indexed Finance - Price Manipulation

#### Lost: $16M

Testing

```sh
forge test --contracts src/test/IndexedFinance_exp.t.sol -vv
```

#### Contract

[IndexedFinance_exp.t.sol](src/test/IndexedFinance_exp.t.sol)

#### Link reference

https://blocksecteam.medium.com/the-analysis-of-indexed-finance-security-incident-8a62b9799836

---

### 20210916 SushiSwap Miso

#### Lost: All funds returned

Testing

```sh
forge test --contracts ./src/test/Sushimiso_exp.sol -vv
```

#### Contract

[Sushimiso_exp.sol](src/test/Sushimiso_exp.sol)

#### Link reference

https://www.paradigm.xyz/2021/08/two-rights-might-make-a-wrong

https://etherscan.io/tx/0x78d6355703507f88f2090eb780d245b0ab26bf470eabdb004761cedf3b1cda44

---

### 20210915 Nimbus Platform

#### Lost: 1.45 ETH

Testing

```sh
forge test --contracts ./src/test/Nimbus_exp.sol -vv
```

#### Contract

[Nimbus_exp.sol](src/test/Nimbus_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1438100688215560192

---

### 20210915 NowSwap Platform

#### Lost: 158.28 WETH and 535,706 USDT

Testing

```sh
forge test --contracts ./src/test/NowSwap_exp.sol -vv
```

#### Contract

[NowSwap_exp.sol](src/test/NowSwap_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1438100688215560192

---

### 20210912 ZABU Finance - Deflationary token uncompatible

Testing

```sh
forge test --contracts src/test/ZABU_exp.sol -vvv
```

#### Contract

[ZABU_exp.sol](src/test/ZABU_exp.sol)

### Link reference

https://slowmist.medium.com/brief-analysis-of-zabu-finance-being-hacked-44243919ea29

---

### 20210903 DAO Maker - Bad Access Controal

#### Lost: $4 million

Testing

```sh
forge test --contracts ./src/test/DaoMaker_exp.sol -vv
```

#### Contract

[DaoMaker_exp.sol](src/test/DaoMaker_exp.sol)

#### Link reference

https://twitter.com/Mudit__Gupta/status/1434059922774237185

https://etherscan.io/tx/0xd5e2edd6089dcf5dca78c0ccbdf659acedab173a8ab3cb65720e35b640c0af7c

---

### 20210830 Cream Finance - Flashloan Attack + Reentrancy

#### Lost: $18 million

Testing

```sh
forge test --contracts ./src/test/Cream_exp.sol -vv
```

#### Contract

[Cream_exp.sol](src/test/Cream_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1432249600002478081

https://twitter.com/creamdotfinance/status/1432249773575208964

https://etherscan.io/tx/0xa9a1b8ea288eb9ad315088f17f7c7386b9989c95b4d13c81b69d5ddad7ffe61e

---

### 20210817 XSURGE - Flashloan Attack + Reentrancy

#### Lost: $5 million

Testing

```sh
forge test --contracts ./src/test/XSURGE_exp.t.sol -vv
```

#### Contract

[XSURGE_exp.t.sol](src/test/XSURGE_exp.t.sol)

#### Link reference

https://beosin.medium.com/a-sweet-blow-fb0a5e08657d

https://medium.com/@Knownsec_Blockchain_Lab/knownsec-blockchain-lab-comprehensive-analysis-of-xsurge-attacks-c83d238fbc55

https://bscscan.com/tx/0x8c93d6e5d6b3ec7478b4195123a696dbc82a3441be090e048fe4b33a242ef09d

---

### 20210811 Poly Network - Bridge, getting around modifier through cross-chain message

#### Lost: $611 million

Testing

```sh
forge test --contracts ./src/test/PolyNetwork/PolyNetwork_exp.sol -vv
```

#### Contract

[PolyNetwork_exp.sol](src/test/PolyNetwork/PolyNetwork_exp.sol)

#### Link reference

https://rekt.news/polynetwork-rekt/

https://slowmist.medium.com/the-root-cause-of-poly-network-being-hacked-ec2ee1b0c68f

https://etherscan.io/tx/0xb1f70464bd95b774c6ce60fc706eb5f9e35cb5f06e6cfe7c17dcda46ffd59581/advanced

https://github.com/polynetwork/eth-contracts/tree/d16252b2b857eecf8e558bd3e1f3bb14cff30e9b

https://www.breadcrumbs.app/reports/671

#### FIX

One of the biggest design lessons that people need to take away from this is: if you have cross-chain relay contracts like this, MAKE SURE THAT THEY CAN'T BE USED TO CALL SPECIAL CONTRACTS. The EthCrossDomainManager shouldn't have owned the EthCrossDomainData contract.

---

### 20210804 WaultFinace - FlashLoan price manipulation

#### Lost: 390 ETH

Testing

```sh
forge test --contracts ./src/test/WaultFinance_exp.sol -vvv
```

#### Contract

[WaultFinance_exp.sol](src/test/WaultFinance_exp.sol)

#### Link reference

https://medium.com/@Knownsec_Blockchain_Lab/wault-finance-flash-loan-security-incident-analysis-368a2e1ebb5b

https://inspexco.medium.com/wault-finance-incident-analysis-wex-price-manipulation-using-wusdmaster-contract-c344be3ed376

---

### 20210728 Levyathan Finance - (I) Lost keys and minting (II) Vulnerable emergencyWithdraw

#### Lost: $1.5 million

Testing

```sh
forge test --contracts ./src/test/Levyathan_poc.sol -vv
```

#### Contract

[Levyathan_poc.sol](src/test/Levyathan_poc.sol)

#### Link reference

https://levyathan-index.medium.com/post-mortem-levyathan-c3ff7f9a6f65

---

### 20210710 Chainswap - Bridge, logic flaw

#### Lost: $4.4 million

Testing

```sh
forge test --contracts ./src/test/Chainswap_exp2.sol -vv
```

#### Contract

[Chainswap_exp2.sol](src/test/Chainswap_exp2.sol)

#### Link reference

https://twitter.com/real_n3o/status/1414071223940571139

https://rekt.news/chainswap-rekt/

https://chain-swap.medium.com/chainswap-exploit-11-july-2021-post-mortem-6e4e346e5a32

---

### 20210702 Chainswap - Bridge, logic flaw

#### Lost: $.8 million

Testing

```sh
forge test --contracts ./src/test/Chainswap_exp1.sol -vv
```

#### Contract

[Chainswap_exp1.sol](src/test/Chainswap_exp1.sol)

#### Link reference

https://chain-swap.medium.com/chainswap-post-mortem-and-compensation-plan-90cad50898ab

---

### 20210628 SafeDollar - Deflationary token uncompatible

### Lost: $.2 million

Testing

```sh
forge test --contracts src/test/SafeDollar_exp.sol -vvv
```

#### Contract

[SafeDollar_exp.sol](src/test/SafeDollar_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1409443556251430918

---

### 20210625 xWin Finance - Subscription incentive mechanism

### Lost: ~$300k

Testing

```sh
forge test --contracts src/test/xWin_exp.sol -vvv
```

#### Contract

[xWin_exp.sol](src/test/xWin_exp.sol)

#### Link reference

https://peckshield.medium.com/xwin-finance-incident-root-cause-analysis-71d0820e6bc1

---

### 20210622 Eleven Finance - Doesn’t burn shares

Testing

```sh
forge test --contracts ./src/test/Eleven.sol -vv
```

#### Contract

[Eleven.sol](src/test/Eleven.sol)

#### Link reference

https://peckshield.medium.com/eleven-finance-incident-root-cause-analysis-123b5675fa76

https://bscscan.com/tx/0xeaaa8f4d33b1035a790f0d7c4eb6e38db7d6d3b580e0bbc9ba39a9d6b80dd250

---

### 20210607 88mph NFT - Access control

Testing

```sh
forge test --contracts ./src/test/88mph_exp.sol -vv
```

#### Contract

[88mph_exp.sol](src/test/88mph_exp.sol)

#### Link reference

https://medium.com/immunefi/88mph-function-initialization-bug-fix-postmortem-c3a2282894d3

---

### 20210603 PancakeHunny - Incorrect calculation

Testing

```sh
forge test --contracts ./src/test/PancakeHunny_exp.sol -vv
```

#### Contract

[PancakeHunny_exp.sol](src/test/PancakeHunny_exp.sol)

#### Link reference

https://medium.com/hunnyfinance/pancakehunny-post-mortem-analysis-de78967401d8

https://bscscan.com/tx/0x765de8357994a206bb90af57dcf427f48a2021f2f28ca81f2c00bc3b9842be8e

---

### 20210527 BurgerSwap - Mathematical flaw + Reentrancy

Testing

```sh
forge test --contracts src/test/BurgerSwap_exp.sol -vv
```

#### Contract

[BurgerSwap_exp.sol](src/test/BurgerSwap_exp.sol)

#### Link reference

https://twitter.com/Mudit__Gupta/status/1398156036574306304

---

### 20210519 PancakeBunny - Price Oracle Manipulation

Testing

```sh
forge test --contracts ./src/test/PancakeBunny_exp.sol -vv
```

#### Contract

[PancakeBunny_exp.sol](src/test/PancakeBunny_exp.sol)

#### Link reference

https://rekt.news/pancakebunny-rekt/

https://bscscan.com/tx/0x897c2de73dd55d7701e1b69ffb3a17b0f4801ced88b0c75fe1551c5fcce6a979

---

### 20210509 RariCapital - Cross Contract Reentrancy

Testing

```sh
forge test --contracts ./src/test/RariCapital_exp.sol -vv
```

#### Contract

[RariCapital_exp.sol](src/test/RariCapital_exp.sol)

#### Link reference

https://rekt.news/rari-capital-rekt/

https://etherscan.com/tx/0x171072422efb5cd461546bfe986017d9b5aa427ff1c07ebe8acc064b13a7b7be

---

### 20210508 Value Defi - Cross Contract Reentrancy

Testing

```sh
forge test --contracts ./src/test/ValueDefi_exp.sol -vv
```

#### Contract

[ValueDefi_exp.sol](src/test/ValueDefi_exp.sol)

#### Link reference

https://rekt.news/rari-capital-rekt/

https://bscscan.com/tx/0xa00def91954ba9f1a1320ef582420d41ca886d417d996362bf3ac3fe2bfb9006

---

### 20210502 Spartan - Logic Flaw

#### Lost: $30.5M

Testing

```sh
forge test --contracts src/test/Spartan_exp.t.sol -vv
```

#### Contract

[Spartan_exp.t.sol](src/test/Spartan_exp.t.sol)

#### Link reference

https://rekt.news/spartan-rekt/

---

### 20210428 Uranium - Miscalculation

#### Lost: $50 million

Testing

```sh
forge test --contracts ./src/test/Uranium_exp.sol -vv
```

#### Contract

[Uranium_exp.sol](src/test/Uranium_exp.sol)

#### Link reference

https://twitter.com/FrankResearcher/status/1387347025742557186

https://bscscan.com/tx/0x5a504fe72ef7fc76dfeb4d979e533af4e23fe37e90b5516186d5787893c37991

---

### 20210308 DODO - Flashloan Attack

#### Lost: $700,000

Testing

```sh
forge test --contracts ./src/test/dodo_flashloan_exp.sol -vv
```

#### Contract

[dodo_flashloan_exp.sol](src/test/dodo_flashloan_exp.sol)

#### Link reference

https://blog.dodoex.io/dodo-pool-incident-postmortem-with-a-little-help-from-our-friends-327e66872d42

https://halborn.com/explained-the-dodo-dex-hack-march-2021/

https://etherscan.io/tx/0x395675b56370a9f5fe8b32badfa80043f5291443bd6c8273900476880fb5221e

---

### 20210305 Paid Network - Private key compromised

#### Lost: $3 million

Testing

```sh
forge test --contracts ./src/test/PAID_exp.sol -vv
```

#### Contract

[PAID_exp.sol](src/test/PAID_exp.sol)

#### Link reference

https://paidnetwork.medium.com/paid-network-attack-postmortem-march-7-2021-9e4c0fef0e07

https://etherscan.io/tx/0x4bb10927ea7afc2336033574b74ebd6f73ef35ac0db1bb96229627c9d77555a0

---

### 20210125 Sushi Badger Digg - Sandwich attack

#### Lost: 81.68 ETH

Testing

```sh
forge test --contracts src/test/Sushi-Badger_Digg.exp.sol -vvvv
```

#### Contract

[Sushi-Badger_Digg.exp.sol](src/test/Sushi-Badger_Digg.exp.sol)

#### Link reference

https://cmichel.io/replaying-ethereum-hacks-sushiswap-badger-dao-digg/

---

</details>
<details> <summary> Before 2020 </summary>

### 20201229 Cover Protocol

Testing

```sh
forge test --contracts ./src/test/Cover_exp.sol -vv
```

#### Contract

[Cover_exp.sol](src/test/Cover_exp.sol)

#### Link reference

https://mudit.blog/cover-protocol-hack-analysis-tokens-minted-exploit/

https://slowmist.medium.com/a-brief-analysis-of-the-cover-protocol-hacked-event-700d747b309c

---

### 20201121 Pickle Finance

#### Lost: $20 million

Testing

```sh
forge test --contracts ./src/test/Pickle_exp.sol -vv
```

#### Contract

[Pickle_exp.sol](src/test/Pickle_exp.sol)

#### Link reference

https://github.com/banteg/evil-jar

https://etherscan.io/tx/0xe72d4e7ba9b5af0cf2a8cfb1e30fd9f388df0ab3da79790be842bfbed11087b0

---

### 20201026 Harvest Finance - Flashloan Attack

#### Lost: $33.8 million

Testing

```sh
forge test --contracts ./src/test/HarvestFinance_exp.sol -vv

```

#### Contract

[HarvestFinance_exp.sol](src/test/HarvestFinance_exp.sol)

#### Link reference

https://rekt.news/harvest-finance-rekt/

https://etherscan.io/tx/0x35f8d2f572fceaac9288e5d462117850ef2694786992a8c3f6d02612277b0877

### 20200804 Opyn Protocol - msgValue in loop

Testing

```sh
forge test --contracts ./src/test/Opyn.exp.sol -vv
```

#### Contract

[Opyn.exp.sol](src/test/Opyn.exp.sol)

#### Link reference

https://medium.com/opyn/opyn-eth-put-exploit-post-mortem-1a009e3347a8

https://etherscan.io/tx/0x56de6c4bd906ee0c067a332e64966db8b1e866c7965c044163a503de6ee6552a

---

### 20200618 Bancor Protocol - Access Control

Testing

```sh
forge test --contracts ./src/test/Bancor_exp.sol -vv
```

#### Contract

[Bancor_exp.sol](src/test/Bancor_exp.sol)

#### Link reference

https://blog.bancor.network/bancors-response-to-today-s-smart-contract-vulnerability-dc888c589fe4

https://etherscan.io/address/0x5f58058c0ec971492166763c8c22632b583f667f

---

### 20180422 Beauty Chain - Integer Overflow

#### Lost: $900 million

Testing

```sh
forge test --contracts ./src/test/BEC_exp.sol -vv
```

#### Contract

[BEC_exp.sol](src/test/BEC_exp.sol)

#### Link reference

https://etherscan.io/tx/0xad89ff16fd1ebe3a0a7cf4ed282302c06626c1af33221ebe0d3a470aba4a660f

https://etherscan.io/address/0xc5d105e63711398af9bbff092d4b6769c82f793d#code

---

### 20171106 Parity - Accidentally Killed It

#### Lost: 514k ETH

Testing

```sh
forge test --contracts ./src/test/Parity_kill.sol -vvvv
```

#### Contract

[Parity_kill.sol](src/test/Parity_kill.sol)

#### Link reference

https://elementus.io/blog/which-icos-are-affected-by-the-parity-wallet-bug/

https://etherscan.io/tx/0x05f71e1b2cb4f03e547739db15d080fd30c989eda04d37ce6264c5686e0722c9

https://etherscan.io/tx/0x47f7cff7a5e671884629c93b368cb18f58a993f4b19c2a53a8662e3f1482f690

</details>

### View Gas Reports

Foundry also has the ability to [report](https://book.getfoundry.sh/forge/gas-reports) the `gas` used per function call which mimics the behavior of [hardhat-gas-reporter](https://github.com/cgewecke/hardhat-gas-reporter). Generally speaking if gas costs per function call is very high, then the likelihood of its success is reduced. Gas optimization is an important activity done by smart contract developers.

Every poc in this repository can produce a gas report like this:

```bash
forge test --gas-report --contracts <contract> -vvv
```

For Example:
Let us find out the gas used in the [Audius poc](#20220723-audius---storage-collision--malicious-proposal)

**Execution**

```bash
forge test --gas-report --contracts ./src/test/Audius.exp.sol -vvv
```

_Demo_

![](./AudiusPocGasReport.gif)

### Bug Reproduce

Moved to [DeFiVulnLabs](https://github.com/SunWeb3Sec/DeFiVulnLabs)

### FlashLoan Testing

Moved to [DeFiLabs](https://github.com/SunWeb3Sec/DeFiLabs)