README.md

# DeFi Hacks Reproduce - Foundry

## 2022 - List of Past DeFi Incidents

129 incidents included.

[20221230 DFS](#20221230---dfs---insufficient-validation--flashloan)

[20221229 JAY](#20221229---jay---insufficient-validation--reentrancy)

[20221225 Rubic](#20221225---rubic---arbitrary-external-call-vulnerability)

[20221223 Defrost](#20221223---defrost---reentrancy)

[20221214 Nmbplatform](#20221214---nmbplatform---flashloan-price-manipulation)

[20221214 FPR](#20221214---fpr---access-control)

[20221213 ElasticSwap](#20221213---elasticswap---business-logic-flaw)

[20221212 BGLD](#20221212---bgld-deflationary-token---flashloan-price-manipulation)

[20221211 Lodestar](#20221211---lodestar---flashloan-price-manipulation)

[20221211 MEVbot_0x28d9](#20221211---MEVbot_0x28d9---insufficient-validation)

[20221210 MUMUG](#20221210---mumug---flashloan-price-manipulation)

[20221210 TIFIToken](#20221210---tifitoken---flashloan-price-manipulation)

[20221209 NOVAToken](#20221209---novatoken---malicious-unlimted-minting-rugged)

[20221207 AES](#20221207---aes-deflationary-token---business-logic-flaw--flashloan-price-manipulation)

[20221205 RFB](#20221205---rfb---predicting-random-numbers)

[20221205 BBOX](#20221205---bbox---flashloan-price-manipulation)

[20221202 OverNight](#20221202---overnight---flashloan-attack)

[20221201 APC](#20221201---apc---flashloan--price-manipulation)

[20221129 MBC & ZZSH](#20221129---mbc--zzsh---business-logic-flaw--access-control)

[20221129 SEAMAN](#20221129---seaman---business-logic-flaw)

[20221123 NUM](#20221123---num---protocol-token-incompatible)

[20221122 AUR](#20221122---aur---lack-of-permission-check)

[20221121 SDAO](#20221121---sdao---business-logic-flaw)

[20221119 AnnexFinance](#20221119---annexfinance---verify-flashloan-callback)

[20221118 Polynomial](#20221118---polynomial---no-input-validation)

[20221117 UEarnPool](#20221117---uearnpool---flashloan-attack)

[20221116 SheepFarm](#20221116---sheepfarm---no-input-validation)

[20221110 DFXFinance](#20221110---dfxfinance---reentrancy)

[20221109 brahTOPG](#20221109-brahtopg---arbitrary-external-call-vulnerability)

[20221108 MEV_0ad8](#20221108-mev_0ad8---arbitrary-call)

[20221108 Kashi](#20221108-kashi---price-caching-design-defect)

[20221107 MooCAKECTX](#20221107-moocakectx---flashloan-attack)

[20221105 BDEX](#20221105-bdex---business-logic-flaw)

[20221027 VTF](#20221027-vtf-token---incorrect-reward-calculation)

[20221027 Team Finance](#20221027-team-finance---liquidity-migration-exploit)

[20221026 N00d Token](#20221026-n00d-token---reentrancy)

[20221025 ULME](#20221025-ulme---access-control)

[20221024 Market](#20221024-market---read-only-reentrancy)

[20221024 MulticallWithoutCheck](#20221024-multicallwithoutcheck---arbitrary-external-call-vulnerability)

[20221021 OlympusDAO](#20221021-olympusdao---no-input-validation)

[20221020 HEALTH Token](#20221020-health---transfer-logic-flaw)

[20221019 BEGO Token](#20221020-bego---incorrect-signature-verification)

[20221018 HPAY](#20221018-hpay---access-control)

[20221018 PLTD Token](#20221018-pltd---transfer-logic-flaw)

[20221017 Uerii Token](#20221017-uerii-token---access-control)

[20221014 INUKO Token](#20221014-inuko---flashloan-price-manipulation)

[20221014 EFLeverVault](#20221014-eflevervault---verify-flashloan-callback)

[20221014 MEVBOT a47b](#20221014-mevbota47b---price-oracle-manipulation)

[20221012 ATK](#20221012-atk---flashloan-manipulate-price)

[20221011 Rabby Wallet SwapRouter](#20221011-rabby-wallet-swaprouter---arbitrary-external-call-vulnerability)

[20221011 Templedao](#20221011-templedao---insufficient-access-control)

[20221010 Carrot](#20221010-carrot---public-functioncall)

[20221009 Xave Finance](#20221009-xave-finance---malicious-proposal-mint--transfer-ownership)

[20221006 RES-Token](#20221006-RES-Token---pair-manipulate)

[20221002 Transit Swap](#20221002-transit-swap---incorrect-owner-address-validation)

[20221001 BabySwap](#20221001-babyswap---parameter-access-control)

[20221001 RL](#20221001-RL-Token---Incorrect-Reward-calculation)

[20221001 Thunder Brawl](#20221001-thunder-brawl---reentrancy)

[20220929 BXH](#20220928-bxh---flashloan--price-oracle-manipulation)

[20220928 MEVBOT Badc0de](#20220928-MEVBOT---arbitrary-call)

[20220923 RADT-DAO](#20220923-RADT-DAO---pair-manipulate)

[20220913 MevBot Private TX](#20220913-mevbot-private-tx)

[20220909 DPC](#20220909-dpc---Incorrect-Reward-calculation)

[20220908 YYDS](#20220908-YYDS---pair-manipulate)

[20220908 NewFreeDAO](#20220908-newfreedao---flashloans-attack)

[20220908 Ragnarok Online Invasion](#20220908-ragnarok-online-invasion---broken-access-control)

[20220906 NXUSD](#20220906-NXUSD---flashloan-price-oracle-manipulation)

[20220905 ZoomproFinance](#20220905-zoomprofinance---flashloans--price-manipulation)

[20220902 ShadowFi](#20220902-shadowfi---access-control)

[20220902 Bad Guys by RPF](#20220902-bad-guys-by-rpf---business-logic-flaw--missing-check-for-number-of-nft-to-mint)

[20220828 DDC](#20220828-ddc)

[20220824 LuckyTiger NFT](#20220824-luckytiger-nft---predicting-random-numbers)

[20220816 Circle_2](#20220816-circle---price-manipulation)

[20220813 Circle](#20220813-circle---price-manipulation)

[20220810 XSTABLE Protocol](#20220810-xstable-protocol---incorrect-logic-check)

[20220809 ANCH](#20220809-anch---skim-token-balance)

[20220807 EGD Finance](#20220807-egd-finance---flashloans--price-manipulation)

[20220804 EtnProduct](#20220804-etnproduct---business-logic-flaw)

[20220803 Qixi](#20220803-qixi---underflow)

[20220802 Nomad Bridge](#20220802-nomad-bridge---business-logic-flaw--incorrect-acceptable-merkle-root-checks)

[20220801 Reaper Farm](#20220801-reaper-farm---business-logic-flaw--lack-of-access-control-mechanism)

[20220725 LPC](#20220725-lpc---business-logic-flaw--incorrect-recipient-balance-check-did-not-check-senderrecipient-in-transfer)

[20220723 Audius](#20220723-audius---storage-collision--malicious-proposal)

[20220713 SpaceGodzilla](#20220713-spacegodzilla---flashloans--price-manipulation)

[20220710 Omni NFT](#20220710-omni-nft---reentrancy)

[20220706 FlippazOne NFT](#20220706-flippazone-nft---accesscontrol)

[20220701 Quixotic - Optimism NFT Marketplace](#20220701-quixotic---optimism-nft-marketplace)

[20220626 XCarnival](#20220626-xcarnival---infinite-number-of-loans)

[20220624 Harmony's Horizon Bridge](#20220624-harmonys-horizon-bridge---private-key-compromised)

[20220618 SNOOD](#20220618-snood---miscalculation-on-_spendallowance)

[20220616 InverseFinance](#20220616-inversefinance---flashloan--price-oracle-manipulation)

[20220608 GYMNetwork](#20220608-gymnetwork---accesscontrol)

[20220608 Optimism - Wintermute](#20220608-optimism---wintermute)

[20220606 Discover](#20220606-discover---flashloan--price-oracle-manipulation)

[20220529 NOVO Protocol](#20220529-novo-protocol---flashloan--price-oracle-manipulation)

[20220524 HackDao](#20220524-HackDao---Skim-token-balance)

[20220517 ApeCoin](#20220517-apecoin-ape---flashloan)

[20220508 Fortress Loans](#20220508-fortress-loans---malicious-proposal--price-oracle-manipulation)

[20220430 Saddle Finance](#20220430-saddle-finance---swap-metapool-attack)

[20220430 Rari Capital/Fei Protocol](#20220430-rari-capitalfei-protocol---flashloan-attack--reentrancy)

[20220428 DEUS DAO](#20220428-deus-dao---flashloan--price-oracle-manipulation)

[20220424 Wiener DOGE](#20220424-wiener-doge---flashloan)

[20220423 Akutar NFT](#20220423-akutar-nft---denial-of-service)

[20220421 Zeed Finance](#20220421-zeed-finance)

[20220416 BeanstalkFarms](#20220416-beanstalkfarms---dao--flashloan)

[20220415 Rikkei Finance](#20220415-rikkei-finance---access-control--price-oracle-manipulation)

[20220412 ElephantMoney](#20220412-elephantmoney---flashloan--price-oracle-manipulation)

[20220411 Creat Future](#20220411-creat-future)

[20220409 GYMNetwork](#20220409-gymnetwork---flashloan--token-migrate-flaw)

[20220329 Ronin Network](#20220329-ronin-network---Bridge)

[20220329 Redacted Cartel](#20220329-redacted-cartel---custom-approval-logic)

[20220327 Revest Finance](#20220327-revest-finance---reentrancy)

[20220326 Auctus](#20220326-auctus)

[20220322 CompoundTUSDSweepTokenBypass](#20220322-compoundtusdsweeptokenbypass)

[20220321 OneRing Finance](#20220321-onering-finance---flashloan--price-oracle-manipulation)

[20220320 LI.FI](#20220320-LiFi---bridges)

[20220320 Umbrella Network](#20220320-umbrella-network---underflow)

[20220315 Agave Finance](#20220315-agave-finance---erc667-reentrancy)

[20220315 Hundred Finance](#20220313-hundred-finance---erc667-reentrancy)

[20220313 Paraluni](#20220313-paraluni---flashloan--reentrancy)

[20220309 Fantasm Finance](#20220309-fantasm-finance---business-logic-in-mint)

[20220305 Bacon Protocol](#20220305-bacon-protocol---reentrancy)

[20220303 TreasureDAO](#20220303-treasuredao---zero-fee)

[20220214 BuildFinance - DAO](#20220214-buildfinance---dao)

[20220208 Sandbox LAND](#20220208-sandbox-land---access-control)

[20220205 Meter](#20220205-Meter---bridge)

[20220204 TecraSpace](#20220204-TecraSpace---Any-token-is-destroyed)

[20220128 Qubit Finance](#20220128-qubit-finance---bridge-address0safetransferfrom-does-not-revert)

[20220118 Multichain (Anyswap)](#20220118-multichain-anyswap---insufficient-token-validation)

### 20221230 - DFS - Insufficient validation + flashloan

### Lost: $1450

Testing

```sh
forge test --contracts ./src/test/2022-12/DFS_exp.sol -vvv
```

#### Contract

[DFS_exp.sol](../../src/test/2022-12/DFS_exp.sol)

#### Link reference

https://twitter.com/CertiKAlert/status/1608788290785665024

---

### 20221229 - JAY - Insufficient validation + Reentrancy

### Lost: ~15.32 ETH

Testing

```sh
forge test --contracts ./src/test/2022-12/JAY_exp.sol -vvv
```

#### Contract

[JAY_exp.sol](../../src/test/2022-12/JAY_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1608372475225866240

---

### 20221225 - Rubic - Arbitrary External Call Vulnerability

### Lost: $1.5M

Testing

```sh
forge test --contracts ./src/test/2022-12/Rubic_exp.sol -vvv
```

#### Contract

[Rubic_exp.sol](../../src/test/2022-12/Rubic_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1606993118901198849

https://twitter.com/peckshield/status/1606937055761952770

---

### 20221223 - Defrost - Reentrancy

### Lost: $170k

Testing

```sh
forge test --contracts ./src/test/2022-12/Defrost_exp.sol -vvv
```

#### Contract

[Defrost_exp.sol](../../src/test/2022-12/Defrost_exp.sol)

#### Link reference

https://twitter.com/PeckShieldAlert/status/1606276020276891650

---

### 20221214 - Nmbplatform - FlashLoan price manipulation

### Lost: 76k

Testing

```sh
forge test --contracts ./src/test/2022-12/Nmbplatform_exp.sol -vvv
```

#### Contract

[Nmbplatform_exp.sol](../../src/test/2022-12/Nmbplatform_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1602877048124735489

---

### 20221214 - FPR - Access Control

### Lost: $29k

Testing

```sh
forge test --contracts ./src/test/2022-12/FPR_exp.sol -vvv
```

#### Contract

[FPR_exp.sol](../../src/test/2022-12/FPR_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1603226968706936832

https://twitter.com/chainlight_io/status/1603282848311480320

---

### 20221213 - ElasticSwap - Business Logic Flaw

### Lost: $845k

Testing

```sh
forge test --contracts ./src/test/2022-12/ElasticSwap_exp.sol -vvv
```

#### Contract

[ElasticSwap_exp.sol](../../src/test/2022-12/ElasticSwap_exp.sol)

#### Link reference

https://quillaudits.medium.com/decoding-elastic-swaps-850k-exploit-quillaudits-9ceb7fcd8d1a

---

### 20221212 - BGLD (Deflationary token) - FlashLoan price manipulation

### Lost: $18k

Testing

```sh
forge test --contracts ./src/test/2022-12/BGLD_exp.sol -vvv
```

#### Contract

[BGLD_exp.sol](../../src/test/2022-12/BGLD_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1602335214356660225

---

### 20221211 - Lodestar - FlashLoan price manipulation

### Lost: $4M

Testing

```sh
forge test --contracts ./src/test/2022-12/Lodestar_exp.sol -vvv
```

#### Contract

[Lodestar_exp.sol](../../src/test/2022-12/Lodestar_exp.sol)

#### Link reference

https://twitter.com/SolidityFinance/status/1601684150456438784

https://blog.lodestarfinance.io/post-mortem-summary-13f5fe0bb336

---

### 20221211 - MEVbot_0x28d9 - Insufficient validation

### Lost: $2k $USDT

Testing

```sh
forge test --contracts ./src/test/2022-12/MEVbot_0x28d9_exp.sol -vvv
```

#### Contract

[MEVbot_0x28d9_exp.sol](../../src/test/2022-12/MEVbot_0x28d9_exp.sol)

#### Link reference

https://x.com/8olidity/status/1601795241433964544

---

### 20221210 - MU&MUG - FlashLoan price manipulation

### Lost: $57k

Testing

```sh
forge test --contracts ./src/test/2022-12/MUMUG_exp.sol -vvv
```

#### Contract

[MUMUG_exp.sol](../../src/test/2022-12/MUMUG_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1601422462012469248

---

### 20221210 - TIFIToken - FlashLoan price manipulation

### Lost: 87 WBNB

Testing

```sh
forge test --contracts ./src/test/2022-12/TIFI_exp.sol -vvv
```

#### Contract

[TIFI_exp.sol](../../src/test/2022-12/TIFI_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1601492605535399936

---

### 20221209 - NOVAToken - Malicious Unlimted Minting (Rugged)

### Lost: 330 $BNB

Testing

```sh
forge test --contracts ./src/test/2022-12/NovaExchange_exp.sol -vvv
```

#### Contract

[NovaExchange_exp.sol](../../src/test/2022-12/NovaExchange_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1601168659585454081

---

### 20221207 - AES (Deflationary token) - Business Logic Flaw & FlashLoan price manipulation

### Lost: $60k

Testing

```sh
forge test --contracts ./src/test/2022-12/AES_exp.sol -vvv
```

#### Contract

[AES_exp.sol](../../src/test/2022-12/AES_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1600442137811689473

https://twitter.com/peckshield/status/1600418002163625984

---

### 20221205 - RFB - Predicting Random Numbers

### Lost: 12BNB

Testing

```sh
forge test --contracts ./src/test/2022-12/RFB_exp.sol -vvv
```

#### Contract

[RFB_exp.sol](../../src/test/2022-12/RFB_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1599991294947778560

---

### 20221205 - BBOX - FlashLoan price manipulation

### Lost: 12k

Testing

```sh
forge test --contracts ./src/test/2022-12/BBOX_exp.sol -vvv
```

#### Contract

[BBOX_exp.sol](../../src/test/2022-12/BBOX_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1599599614490877952

---

### 20221202 - OverNight - FlashLoan Attack

### Lost: 170k

Testing

```sh
forge test --contracts ./src/test/2022-12/Overnight_exp.sol -vvv
```

#### Contract

[Overnight_exp.sol](../../src/test/2022-12/Overnight_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1598704809690877952

---

### 20221201 - APC - FlashLoan & price manipulation

### Lost: $6k

Testing

```sh
forge test --contracts ./src/test/2022-12/APC_exp.sol -vvv
```

#### Contract

[APC_exp.sol](../../src/test/2022-12/APC_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1598262002010378241

---

### 20221129 - MBC & ZZSH - Business Logic Flaw & Access Control

### Lost $5.9k

Testing

```sh
forge test --contracts ./src/test/2022-11/MBC_ZZSH_exp.sol -vvv
```

#### Contract

[MBC_ZZSH_exp.sol](../../src/test/2022-11/MBC_ZZSH_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1597742575623888896

https://twitter.com/CertiKAlert/status/1597639717096460288

---

### 20221129 - SEAMAN - Business Logic Flaw

### Lost $7k

Testing

```sh
forge test --contracts ./src/test/2022-11/SEAMAN_exp.sol -vvv
```

#### Contract

[SEAMAN_exp.sol](../../src/test/2022-11/SEAMAN_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1597493955939405825

https://twitter.com/CertiKAlert/status/1597513374841044993

https://twitter.com/BeosinAlert/status/1597535796621631489

---

### 20221123 - NUM - Protocol Token incompatible

### Lost $13k

Testing

```sh
forge test --contracts ./src/test/2022-11/NUM_exp.sol -vvv
```

#### Contract

[NUM_exp.sol](../../src/test/2022-11/NUM_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1595346020237352960

---

### 20221122 - AUR - Lack of Permission Check

### Lost: $13k

Testing

```sh
forge test --contracts ./src/test/2022-11/AUR_exp.sol -vvv
```

#### Contract

[AUR_exp.sol](../../src/test/2022-11/AUR_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1595142246570958848

---

### 20221121 - sDAO - Business Logic Flaw

### Lost: $13k

Testing

```sh
forge test --contracts ./src/test/2022-11/SDAO_exp.sol -vvv
```

#### Contract

[SDAO_exp.sol](../../src/test/2022-11/SDAO_exp.sol)

#### Link reference

https://twitter.com/8olidity/status/1594693686398316544

https://twitter.com/CertiKAlert/status/1594615286556393478

---

### 20221119 - AnnexFinance - Verify flashLoan Callback

### Lost: $3k

Testing

```sh
forge test --contracts ./src/test/2022-11/Annex_exp.sol -vvv
```

#### Contract

[Annex_exp.sol](../../src/test/2022-11/Annex_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1593690338526273536

---

### 20221118 - Polynomial - No input validation

### Lost: ~1.4K USD

Testing

```sh
forge test --contracts ./src/test/2022-11/Polynomial_exp.sol -vvv
```

#### Contract

[Polynomial_exp.sol](../../src/test/2022-11/Polynomial_exp.sol)

#### Link reference

https://x.com/peckshield/status/1602216000187174912

https://x.com/0xPoor4ever/status/1602156729105788929

---

### 20221117 - UEarnPool - FlashLoan Attack

### Lost: $24k

Testing

```sh
forge test --contracts ./src/test/2022-11/UEarnPool_exp.sol -vvv
```

#### Contract

[UEranPool_exp.sol](../../src/test/2022-11/UEarnPool_exp.sol)

#### Link reference

https://twitter.com/CertiKAlert/status/1593094922160128000

---

### 20221116 - SheepFarm - No input validation

### Lost: ~1BNB

Testing

```sh
forge test --contracts ./src/test/2022-11/SheepFarm_exp.sol -vvv
```

#### Contract

[SheepFarm_exp.sol](../../src/test/2022-11/SheepFarm_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1592658104394473472

https://twitter.com/BlockSecTeam/status/1592734292727455744

---

### 20221110 - DFXFinance - Reentrancy

### Lost: $4M

Testing

```sh
forge test --contracts ./src/test/2022-11/DFX_exp.sol -vvv
```

#### Contract

[DFX_exp.sol](../../src/test/2022-11/DFX_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1590960299246780417

https://twitter.com/BeosinAlert/status/1591012525914861570

https://twitter.com/AnciliaInc/status/1590839104731684865

https://twitter.com/peckshield/status/1590831589004816384

---

### 20221109 BrahTOPG - Arbitrary External Call Vulnerability

### Lost: $89k

Testing

```sh
 forge test --contracts ./src/test/2022-11/BrahTOPG_exp.sol -vvv
```

#### Contract

[BrahTOPG_exp.sol](../../src/test/2022-11/BrahTOPG_exp.sol)

#### Link reference

https://twitter.com/SlowMist_Team/status/1590685173477101570

---

### 20221108 MEV_0ad8 - Arbitrary call

### Lost: $282k

Testing

```sh
forge test --contracts ../../src/test/2022-11/MEV_0ad8_exp.sol -vvvv
```

#### Contract

[MEV_0ad8_exp.sol](../../src/test/2022-11/MEV_0ad8_exp.sol)

#### Link reference

https://twitter.com/Supremacy_CA/status/1590337718755954690

---

### 20221108 Kashi - Price-caching Design Defect

### Lost: $110k

Testing

```sh
forge test --contracts ./src/test/2022-11/Kashi_exp.sol -vvv
```

#### Contract

[Kashi_exp.sol](../../src/test/2022-11/Kashi_exp.sol)

#### Link reference

https://eigenphi.substack.com/p/casting-a-magic-spell-on-abracadabra

https://twitter.com/BlockSecTeam/status/1603633067876155393

---

### 20221107 MooCAKECTX - FlashLoan Attack

### Lost: $140k

Testing

```sh
forge test --contracts ./src/test/2022-11/MooCAKECTX_exp.sol -vvv
```

#### Contract

[MooCAKECTX_exp.sol](../../src/test/2022-11/MooCAKECTX_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1589501207181393920

https://twitter.com/CertiKAlert/status/1589428153591615488

---

### 20221105 BDEX - Business Logic Flaw

### Lost: 16WBNB

Testing

```sh
forge test --contracts ./src/test/2022-11/BDEX_exp.sol -vvv
```

#### Contract

[BDEX_exp.sol](../../src/test/2022-11/BDEX_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1588579143830343683

---

### 20221027 VTF Token - Incorrect Reward calculation

### Lost: $50k

Testing

```sh
forge test --contracts ./src/test/2022-10/VTF_exp.sol -vvv
```

#### Contract

[VTF_exp.sol](../../src/test/2022-10/VTF_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1585575129936977920

https://twitter.com/peckshield/status/1585572694241988609

https://twitter.com/BeosinAlert/status/1585587030981218305

---

### 20221027 Team Finance - Liquidity Migration Exploit

### Lost: Multiple Tokens ~$15.8M US$

Testing

```sh
forge test --contracts ./src/test/2022-10/TeamFinance_exp.sol -vvv
```

#### Contract

[TeamFinance_exp.sol](../../src/test/2022-10/TeamFinance_exp.sol)

#### Link reference

https://twitter.com/TeamFinance_/status/1585770918873542656

https://twitter.com/peckshield/status/1585587858978623491

https://twitter.com/solid_group_1/status/1585643249305518083

https://twitter.com/BeosinAlert/status/1585578499125178369

---

### 20221026 N00d Token - Reentrancy

### Lost $29k

Testing

```sh
forge test --contracts ../../src/test/2022-10/N00d_exp.sol -vvv
```

#### Contract

[N00d_exp.sol](../../src/test/2022-10/N00d_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1584959295829180416

https://twitter.com/AnciliaInc/status/1584955717877784576

---

### 20221025 ULME - Access Control

### Lost ~250k US$ which resulted in ~50k profit

Testing

```sh
forge test --contracts ./src/test/2022-10/ULME_exp.sol -vvv
```

#### Contract

[ULME_exp.sol](../../src/test/2022-10/ULME_exp.sol) | [ULME_exp2.sol](../../src/test/2022-10/ULME_exp2.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1584839309781135361

https://twitter.com/BeosinAlert/status/1584888021299916801

https://medium.com/neptune-mutual/decoding-ulme-token-flash-loan-attack-56470d261787

---

### 20221024 Market - Read-only Reentrancy

### Lost: $220k

Testing

```sh
forge test --contracts ./src/test/2022-10/Market_exp.sol -vv
```

#### Contract

[Market_exp.sol](../../src/test/2022-10/Market_exp.sol)

#### Link reference

https://quillaudits.medium.com/decoding-220k-read-only-reentrancy-exploit-quillaudits-30871d728ad5

---

### 20221024 MulticallWithoutCheck - Arbitrary External Call Vulnerability

### Lost $600

Testing

```sh
forge test --contracts ./src/test/2022-10/MulticallWithoutCheck_exp.sol -vvv
```

#### Contract

[MulticallWithoutCheck_exp.sol](../../src/test/2022-10/MulticallWithoutCheck_exp.sol)

---

### 20221021 OlympusDAO - No input validation

### Lost ~$292K (30500 OHM)

Testing

```sh
forge test --contracts ./src/test/2022-10/OlympusDao_exp.sol -vvv
```

#### Contract

[OlympusDao_exp.sol](../../src/test/2022-10/OlympusDao_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1583416829237526528

---

### 20221020 HEALTH - Transfer Logic Flaw

### Lost 16 BNB

Testing

```sh
forge test --contracts ./src/test/2022-10/HEALTH_exp.sol -vvv
```

#### Contract

[HEALTH_exp.sol](../../src/test/2022-10/HEALTH_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1583073442433495040

---

### 20221020 BEGO - Incorrect signature verification

### Lost 12 BNB

Testing

```sh
forge test --contracts ./src/test/2022-10/BEGO_exp.sol -vvv
```

#### Contract

[BEGO_exp.sol](../../src/test/2022-10/BEGO_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1582828751250784256

https://twitter.com/peckshield/status/1582892058800685058

---

### 20221018 HPAY - Access Control

### Lost: 115 BNB

Testing

```sh
forge test --contracts ./src/test/2022-10/HPAY_exp.sol -vvv
```

#### Contract

[HPAY_exp.sol](../../src/test/2022-10/HPAY_exp.sol)

#### Link reference

https://twitter.com/Supremacy_CA/status/1582345448190140417

---

### 20221018 PLTD - Transfer Logic Flaw

### Lost: $ 24k

Testing

```sh
forge test --contracts ./src/test/2022-10/PLTD_exp.sol -vvv
```

#### Contract

[PLTD_exp.sol](../../src/test/2022-10/PLTD_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1582181583343484928

---

### 20221017 Uerii Token - Access Control

### Lost: $2.4 k

Testing

```sh
forge test --contracts ./src/test/2022-10/Uerii_exp.sol -vvv
```

#### Contract

[Uerii_exp.sol](../../src/test/2022-10/Uerii_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1581988895142526976

---

### 20221014 INUKO - FlashLoan price manipulation

### Lost: $50k

Testing

```sh
forge test --contracts ./src/test/2022-10/INUKO_exp.sol -vvv
```

#### Contract

[INUKO_exp.sol](../../src/test/2022-10/INUKO_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1587848874076430336

---

### 20221014 EFLeverVault - Verify flashLoan Callback

### Lost: 750 ETH

Testing

```sh
 forge test --contracts ./src/test/2022-10/EFLeverVault_exp.sol -vvv
```

#### Contract

[EFLeverVault_exp.sol](../../src/test/2022-10/EFLeverVault_exp.sol)

#### Link reference

https://twitter.com/Supremacy_CA/status/1581012823701786624

https://twitter.com/MevRefund/status/1580917351217627136

https://twitter.com/danielvf/status/1580936010556661761

---

### 20221014 MEVBOTa47b - Price Oracle Manipulation

### Lost: ~187.75 WETH

Testing

```sh
forge test --contracts ./src/test/2022-10/MEVa47b_exp.sol -vvv
```

#### Contract

[MEVa47b_exp.sol](../../src/test/2022-10/MEVa47b_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1580779311862190080

https://twitter.com/AnciliaInc/status/1580705036400611328

https://etherscan.io/tx/0x35ecf595864400696853c53edf3e3d60096639b6071cadea6076c9c6ceb921c1

---

### 20221012 ATK - FlashLoan manipulate price

### Lost: ~127K BUSD

Testing

```sh
forge test --contracts ./src/test/2022-10/ATK_exp.sol -vvv
```

#### Contract

[ATK_exp.sol](../../src/test/2022-10/ATK_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1580095325200474112

---

### 20221011 Rabby Wallet SwapRouter - Arbitrary External Call Vulnerability

### Lost: ~200,000 US$

Testing

```sh
forge test --contracts ../../src/test/2022-10/RabbyWallet_SwapRouter_exp.sol -vv
```

#### Contract

[RabbyWallet_SwapRouter_exp.sol](../../src/test/2022-10/RabbyWallet_SwapRouter_exp.sol)

#### Link reference

https://twitter.com/Supremacy_CA/status/1579813933669486592

https://twitter.com/SlowMist_Team/status/1579839744128978945

https://twitter.com/BeosinAlert/status/1579856733178331139

---

### 20221011 Templedao - Insufficient access control

### Lost: $2.3 million

Testing

```sh
forge test --contracts ../../src/test/2022-10/Templedao_exp.sol -vv
```

#### Contract

[Templedao_exp.sol](../../src/test/2022-10/Templedao_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1579843881893769222

https://etherscan.io/tx/0x8c3f442fc6d640a6ff3ea0b12be64f1d4609ea94edd2966f42c01cd9bdcf04b5

---

### 20221010 Carrot - Public functionCall

### Lost: 31,318 BUSDT

Testing

```sh
forge test --contracts ../../src/test/2022-10/Carrot_exp.sol -vv
```

#### Contract

[Carrot_exp.sol](../../src/test/2022-10/Carrot_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1579908411235237888

https://bscscan.com/tx/0xa624660c29ee97f3f4ebd36232d8199e7c97533c9db711fa4027994aa11e01b9

---

### 20221009 Xave Finance - Malicious Proposal Mint & Transfer Ownership

### Lost: 100,000,000,000,000 RNBW

Testing

```sh
forge test --contracts ../../src/test/2022-10/XaveFinance_exp.sol -vv
```

#### Contract

[XaveFinance_exp.sol](../../src/test/2022-10/XaveFinance_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1579040051853303808

https://etherscan.io/tx/0xc18ec2eb7d41638d9982281e766945d0428aaeda6211b4ccb6626ea7cff31f4a

---

### 20221006 RES-Token - pair manipulate

Testing

```sh
forge test --contracts ../../src/test/2022-10/RES_exp.sol -vv
```

#### Contract

[RES_exp.sol](../../src/test/2022-10/RES_exp.sol)
[RES_exp2.sol](../../src/test/2022-10/RES_exp2.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1578119778446680064

https://bscscan.com/tx/0xe59fa48212c4ee716c03e648e04f0ca390f4a4fc921a890fded0e01afa4ba96d

---

### 20221002 Transit Swap - Incorrect owner address validation

### Lost: over $21 Million

Testing

```sh
forge test --contracts ../../src/test/2022-10/TransitSwap_exp.sol -vv
```

#### Contract

[TransitSwap_exp.sol](../../src/test/2022-10/TransitSwap_exp.sol)

#### Link reference

https://twitter.com/TransitFinance/status/1576463550557483008

https://twitter.com/1nf0s3cpt/status/1576511552592543745

https://bscscan.com/tx/0x181a7882aac0eab1036eedba25bc95a16e10f61b5df2e99d240a16c334b9b189

---

### 20221001 BabySwap - Parameter Access Control

Testing

```sh
forge test --contracts ./src/test/2022-10/BabySwap_exp.sol -vvv
```

#### Contract

[BabySwap_exp.sol](../../src/test/2022-10/BabySwap_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1576441612812836865

---

### 20221001 RL Token - Incorrect Reward calculation

Testing

```sh
forge test --contracts ../../src/test/2022-10/RL_exp.sol -vv
```

#### Contract

[RL_exp.sol](../../src/test/2022-10/RL_exp.sol)

#### Link reference

https://twitter.com/CertiKAlert/status/1576195971003858944

---

### 20221001 Thunder Brawl - Reentrancy

Testing

```sh
forge test --contracts ../../src/test/2022-09/THB_exp.sol -vv
```

#### Contract

[THB_exp.sol](../../src/test/2022-09/THB_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1575890733373849601

https://bscscan.com/tx/0x57aa9c85e03eb25ac5d94f15f22b3ba3ab2ef60b603b97ae76f855072ea9e3a0

---

### 20220928 BXH - Flashloan & Price Oracle Manipulation

### Lost: $40,305

Testing

```sh
forge test --contracts ../../src/test/2022-09/BXH_exp.sol -vv
```

#### Contract

[BXH_exp.sol](../../src/test/2022-09/BXH_exp.sol)

#### Link reference

https://www.jinse.com/lives/319392.html

https://bscscan.com/tx/0xa13c8c7a0c97093dba3096c88044273c29cebeee109e23622cd412dcca8f50f4

---

### 20220928 MEVBOT - Arbitrary Call

### Lost: $1,469,700

An anonymous attacker noticed a flaw in the bots arbitrage contract code, and stole not only the recently acquired 800 ETH, but the entire 1,101 ETH in 0xbad’s wallet.

Testing

```sh
forge test --contracts ./src/test/2022-09/MEVbadc0de_exp.sol -vvv
```

#### Contract

[MEVbadc0de_exp.sol](../../src/test/2022-09/MEVbadc0de_exp.sol)

#### Link reference

https://rekt.news/ripmevbot/

https://etherscan.io/tx/0x59ddcf5ee5c687af2cbf291c3ac63bf28316a8ecbb621d9f62d07fa8a5b8ef4e

---

### 20220923 RADT-DAO - pair manipulate

#### Lost: 94,304 USDT

Testing

```sh
forge test --contracts ./src/test/2022-09/RADT_exp.sol -vvv
```

#### Contract

[RADT_exp.sol](../../src/test/2022-09/RADT_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1573252869322846209

https://bscscan.com/tx/0xd692f71de2768017390395db815d34033013136c378177c05d0d46ef3b6f0897

---

### 20220913 MevBot private tx - Incorrect access control

### Lost: $140 K

Testing

```sh
forge test --contracts ./src/test/2022-09/BNB48MEVBot_exp.sol -vvv
```

#### Contract

[BNB48MEVBot_exp.sol](../../src/test/2022-09/BNB48MEVBot_exp.sol)

#### Link reference

https://blocksecteam.medium.com/the-two-sides-of-the-private-tx-service-on-binance-smart-chain-a76917c3ce51

https://twitter.com/1nf0s3cpt/status/1577594615104172033

https://bscscan.com/tx/0xd48758ef48d113b78a09f7b8c7cd663ad79e9965852e872fdfc92234c3e598d2

---

### 20220909 DPC - Incorrect Reward calculation

#### Lost: $103,755

Testing

```sh
forge test --contracts ./src/test/2022-09/DPC_exp.sol -vvv
```

#### Contract

[DPC_exp.sol](../../src/test/2022-09/DPC_exp.sol)

#### Link reference

https://twitter.com/BeosinAlert/status/1568429355919089664

https://bscscan.com/address/0x2109bbecB0a563e204985524Dd3DB2F6254AB419

https://learnblockchain.cn/article/4733

---

### 20220908 YYDS - pair manipulate

#### Lost: 742,286.27 BUSD

Testing

```sh
forge test --contracts ./src/test/2022-09/Yyds_exp.sol -vvv
```

#### Contract

[Yyds_exp.sol](../../src/test/2022-09/Yyds_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1567928377432051713

https://bscscan.com/tx/0x04a1f0d1694242515ecb14faa71053901f11a1286cd21c27fe5542f9eeb62356

---

### 20220908 Ragnarok Online Invasion - Broken Access Control

#### Lost: 157.98 BNB (~44,000 US$)

Testing

```sh
forge test --contracts ./src/test/2022-09/ROI_exp.sol -vvv
```

#### Contract

[ROI_exp.sol](../../src/test/2022-09/ROI_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1567746825616236544

https://twitter.com/CertiKAlert/status/1567754904663429123

https://www.panewslab.com/zh_hk/articledetails/mbzalpdi.html

https://medium.com/quillhash/decoding-ragnarok-online-invasion-44k-exploit-quillaudits-261b7e23b55

---

### 20220908 NewFreeDAO - Flashloans Attack

#### Lost: 1M US$

Testing

```sh
forge test --contracts ./src/test/2022-09/NewFreeDAO_exp.sol -vvv
```

#### Contract

[NewFreeDAO_exp.sol](../../src/test/2022-09/NewFreeDAO_exp.sol)

#### Link reference

https://twitter.com/SlowMist_Team/status/1567854876633309186

https://bscscan.com/tx/0x1fea385acf7ff046d928d4041db017e1d7ead66727ce7aacb3296b9d485d4a26

---

### 20220906 NXUSD - flashloan price oracle manipulation

#### Lost 50,000 USD

Testing

```sh
forge test --contracts ./src/test/2022-09/NXUSD_exp.sol -vvv
```

#### Contract

[NXUSD_exp.sol](../../src/test/2022-09/NXUSD_exp.sol)

#### Link reference

https://medium.com/nereus-protocol/post-mortem-flash-loan-exploit-in-single-nxusd-market-343fa32f0c6

https://snowtrace.io/tx/0x0ab12913f9232b27b0664cd2d50e482ad6aa896aeb811b53081712f42d54c026

---

### 20220905 ZoomproFinance - Flashloans & Price Manipulation

#### Lost: 61,160 USDT

Testing

```sh
forge test --contracts ./src/test/2022-09/ZoomproFinance_exp.sol -vvv
```

#### Contract

[ZoomproFinance_exp.sol](../../src/test/2022-09/ZoomproFinance_exp.sol)

#### Link reference

https://twitter.com/blocksecteam/status/1567027459207606273

https://bscscan.com/tx/0xe176bd9cfefd40dc03508e91d856bd1fe72ffc1e9260cd63502db68962b4de1a

---

### 20220902 ShadowFi - Access Control

#### Lost: 1,078 BNB

Anyone can burn $SDF

Testing

```sh
forge test --contracts ./src/test/2022-09/Shadowfi_exp.sol -vvv
```

#### Contract

[Shadowfi_exp.sol](../../src/test/2022-09/Shadowfi_exp.sol)

#### Link reference

https://twitter.com/PeckShieldAlert/status/1565549688509861888

https://bscscan.com/tx/0xe30dc75253eecec3377e03c532aa41bae1c26909bc8618f21fb83d4330a01018

---

### 20220902 Bad Guys by RPF - Business Logic Flaw : Missing Check For Number of NFT to Mint

#### Lost: Bad Guys by RPF(400 NFTs)

Testing

```sh
forge test --contracts ./src/test/2022-09/BadGuysbyRPF_exp.sol -vvv
```

#### Contract

[BadGuysbyRPF_exp.sol](../../src/test/2022-09/BadGuysbyRPF_exp.sol)

#### Link reference

https://twitter.com/RugDoctorApe/status/1565739119606890498

https://etherscan.io/tx/0x27e64a8215ae1528245c912bcca09883fdd7cce69249bd5d5d1c0eecf5297b96

---

### 20220828 DDC - Unchecked External Calls

Testing

```sh
forge test --contracts ./src/test/2022-08/DDC_exp.sol -vvv
```

#### Contract

[DDC_exp.sol](../../src/test/2022-08/DDC_exp.sol)

#### Link reference

https://x.com/BeosinAlert/status/1564240190851383302

https://immunebytes.com/blog/ddc-token-hack-aug-28-2022-detailed-analysis/

### 20220824 LuckyTiger NFT - Predicting Random Numbers

Testing

```sh
forge test --contracts ./src/test/2022-08/LuckyTiger_exp.sol -vvv
```

#### Contract

[LuckyTiger_exp.sol](../../src/test/2022-08/LuckyTiger_exp.sol)

#### Link reference

https://twitter.com/1nf0s3cpt/status/1576117129589317633

https://etherscan.io/tx/0x804ff3801542bff435a5d733f4d8a93a535d73d0de0f843fd979756a7eab26af

---

### 20220816 Circle - Price Manipulation

### Lost: ~$151.6K


```sh
forge test --contracts ./src/test/2022-08/Circle_exp2.sol -vvv
```
#### Contract
[Circle_exp2.sol](../../src/test/2022-08/Circle_exp2.sol)
### Link reference

https://app.blocksec.com/explorer/tx/eth/0xf1818f62c635e5c80ef16b7857da812c74ce330ebed46682b4d173bffe84c666?line=74

---

### 20220813 Circle - Price Manipulation

### Lost: ~$50.5K


```sh
forge test --contracts ./src/test/2022-08/Circle_exp1.sol -vvv
```
#### Contract
[Circle_exp1.sol](../../src/test/2022-08/Circle_exp1.sol)
### Link reference

https://app.blocksec.com/explorer/tx/eth/0xa4e650772f6e6b7ecc0964fe4c3854850669d1467570a2fa2b6edfa0f112c4b7

---

### 20220810 XSTABLE Protocol - Incorrect Logic Check

Testing

```sh
forge test --contracts ./src/test/2022-08/XST_exp.sol -vvv
```

#### Contract

[XST.exp.sol](../../src/test/2022-08/XST_exp.sol)
[XST02_exp.sol](../../src/test/2022-08/XST_exp2.sol)

#### Link reference

https://mobile.twitter.com/BlockSecTeam/status/1557195012042936320

---

### 20220809 ANCH - Skim token balance

Testing

```sh
forge test --contracts ./src/test/2022-08/ANCH_exp.sol -vvv
```

#### Contract

[ANCH_exp.sol](../../src/test/2022-08/ANCH_exp.sol)

#### Link reference

https://twitter.com/AnciliaInc/status/1557527183966408706

---

### 20220807 EGD Finance - Flashloans & Price Manipulation

#### Lost: 36,044 USDT

Testing

```sh
forge test --contracts ./src/test/2022-08/EGD_Finance_exp.sol -vvv
```

#### Contract

[EGD_Finance_exp.sol](../../src/test/2022-08/EGD_Finance_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1556483435388350464

https://twitter.com/PeckShieldAlert/status/1556486817406283776

---

### 20220804 EtnProduct - Business Logic Flaw

#### Lost: 3074 USD

Testing

```sh
forge test --contracts ./src/test/2022-08/EtnProduct_exp.sol -vvv
```

#### Contract

[EtnProcudt_exp.sol](../../src/test/2022-08/EtnProduct_exp.sol)

#### Link reference

https://x.com/BeosinAlert/status/1555439220474642432

---

### 20220803 Qixi - Underflow

#### Lost: 6.08 BNB

Testing

```sh
forge test --contracts ./src/test/2022-08/Qixi_exp.sol -vvv
```

#### Contract

[Qixi_exp.sol](../../src/test/2022-08/Qixi_exp.sol)

#### Link reference

https://x.com/8olidity/status/1555366421693345792

---

### 20220802 Nomad Bridge - Business Logic Flaw : Incorrect acceptable merkle-root checks

#### Lost: Multiple ERC-20 Tokens (~152M US$)

Testing

```sh
forge test --contracts ./src/test/2022-08/NomadBridge_exp.sol -vvv
```

#### Contract

[NomadBridge_exp.sol](../../src/test/2022-08/NomadBridge_exp.sol)

#### Link reference

https://twitter.com/samczsun/status/1554252024723546112

https://www.certik.com/resources/blog/28fMavD63CpZJOKOjb9DX3-nomad-bridge-exploit-incident-analysis

https://blog.coinbase.com/nomad-bridge-incident-analysis-899b425b0f34

---

### 20220801 Reaper Farm - Business Logic Flaw : Lack of access control mechanism

#### Lost: Multiple ERC-20 Tokens (~1.7M US$)

Testing

```sh
forge test --contracts ./src/test/2022-08/ReaperFarm_exp.sol -vvv
```

#### Contract

[ReaperFarm_exp.sol](../../src/test/2022-08/ReaperFarm_exp.sol)

#### Link reference

https://twitter.com/Reaper_Farm/status/1554500909740302337

https://twitter.com/BeosinAlert/status/1554476940593340421

---

### 20220725 LPC - Business Logic Flaw : Incorrect recipient balance check, did not check sender!=recipient in transfer

#### Lost: 178 BNB (~45,715 US$)

Testing

```sh
forge test --contracts ./src/test/2022-07/LPC_exp.sol -vvv
```

#### Contract

[LPC_exp.sol](../../src/test/2022-07/LPC_exp.sol)

#### Link reference

https://www.panewslab.com/zh_hk/articledetails/uwv4sma2.html

https://twitter.com/BeosinAlert/status/1551535854681718784

---

### 20220723 Audius - Storage Collision & Malicious Proposal

#### Lost: 704 ETH (~1.08M US$)

Testing

```sh
forge test --contracts ./src/test/2022-07/Audius_exp.sol -vvv
```

#### Contract

[Audius_exp.sol](../../src/test/2022-07/Audius_exp.sol)

#### Link reference

https://twitter.com/AudiusProject/status/1551000725169180672

https://twitter.com/1nf0s3cpt/status/1551050841146400768

https://blog.audius.co/article/audius-governance-takeover-post-mortem-7-23-22

---

### 20220713 SpaceGodzilla - Flashloans & Price Manipulation

#### Lost: 25,378 BUSD

Testing

```sh
forge test --contracts ./src/test/2022-07/SpaceGodzilla_exp.sol -vvv
```

#### Contract

[SpaceGodzilla_exp.sol](../../src/test/2022-07/SpaceGodzilla_exp.sol)

#### Link reference

https://mobile.twitter.com/BlockSecTeam/status/1547456591900749824

https://medium.com/numen-cyber-labs/spacegodzilla-attack-event-analysis-d29a061b17e1

https://learnblockchain.cn/article/4396

https://learnblockchain.cn/article/4395 \*\*\* math behind such attack

---

### 20220710 Omni NFT - Reentrancy

#### Lost: $1.4M

Testing

```sh
forge test --contracts ./src/test/2022-07/Omni_exp.sol -vv
```

#### Contract

[Omni_exp.sol](../../src/test/2022-07/Omni_exp.sol)

#### Link reference

https://twitter.com/SlowMist_Team/status/1546379086792388609

https://etherscan.io/tx/0x05d65e0adddc5d9ccfe6cd65be4a7899ebcb6e5ec7a39787971bcc3d6ba73996

---

### 20220706 FlippazOne NFT - Accesscontrol

The ownerWithdrawAllTo() without onlyOwner can call it.

Testing

```sh
forge test --contracts ./src/test/2022-07/FlippazOne.sol -vvvv
```

#### Contract

[FlippazOne_exp.sol](../../src/test/2022-07/FlippazOne_exp.sol)

#### Link reference

https://twitter.com/bertcmiller/status/1544496577338826752

https://etherscan.io/tx/0x8bded20c1db5a1d5f595b15e682a95ce11d3c895d6031147fa49c4ffa5729a30

---

### 20220701 Quixotic - Optimism NFT Marketplace

#### Lost: $100K

fillSellOrder function only check seller signature.

ECDSA signature combined with v r s, if recoveredAddress == sellOrder.seller; sellorder execute.

Testing

```sh
forge test --contracts ./src/test/2022-07/Quixotic_exp.sol -vv
```

#### Contract

[Quixotic_exp.sol](../../src/test/2022-07/Quixotic_exp.sol)

#### Link reference

https://twitter.com/1nf0s3cpt/status/1542808565349777408

https://twitter.com/SlowMist_Team/status/1542795627603857409

https://optimistic.etherscan.io/tx/0x5dc519726e1236eb846271f6699e03cdd1a8fd593a2900c71cd2aabbdb7c92e6

---

### 20220626 XCarnival - Infinite Number of Loans

#### Lost: 3087 ETH (~$3.87M)

Testing

```sh
forge test --contracts ./src/test/2022-06/XCarnival_exp.sol -vv
```

#### Contract

[XCarnival_exp.sol](../../src/test/2022-06/XCarnival_exp.sol)

#### Link reference

https://twitter.com/XCarnival_Lab/status/1541226298399653888

https://twitter.com/peckshield/status/1541047171453034501

https://twitter.com/BlockSecTeam/status/1541070850505723905

---

### 20220624 Harmony's Horizon Bridge - Private key compromised

#### Lost: $100 million

Private key compromised case of Multisig wallet

Testing

```sh
forge test --contracts ./src/test/2022-06/Harmony_multisig_exp.sol -vvvv
```

#### Contract

[Harmony_multisig_exp.sol](../../src/test/2022-06/Harmony_multisig_exp.sol)

#### Link reference

https://twitter.com/harmonyprotocol/status/1540110924400324608

https://twitter.com/0xIvo/status/1540165571681128448

https://twitter.com/1nf0s3cpt/status/1540139812715261952

---

### 20220618 SNOOD - Miscalculation on \_spendAllowance

#### Lost: 104 ETH

On `_spendAllowance` function they use `_getStandardAmount` and should be `_getReflectedAmount`

Testing

```sh
forge test --contracts ./src/test/2022-06/Snood_exp.sol -vv
```

#### Contract

[Snood_exp.sol](../../src/test/2022-06/Snood_exp.sol)

#### Link reference

https://ethereum.stackexchange.com/questions/130472/attack-on-erc-777-smart-contract-and-uniswapv2pair-resulting-in-104-eth-liquidit

https://etherscan.io/tx/0x9a6227ef97d7ce75732645bd604ef128bb5dfbc1bfbe0966ad1cd2870d45a20e

https://ethtx.info/mainnet/0x9a6227ef97d7ce75732645bd604ef128bb5dfbc1bfbe0966ad1cd2870d45a20e/

---

### 20220616 InverseFinance - Flashloan & Price Oracle Manipulation

#### Lost: 53.2445 WBTC and 99,976.29 USDT

Testing

```sh
forge test --contracts ./src/test/2022-06/InverseFinance_exp.sol -vv
```

#### Contract

[InverseFinance_exp.sol](../../src/test/2022-06/InverseFinance_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1537382891230883841

https://twitter.com/SlowMist_Team/status/1537602909512376321

https://blocksecteam.medium.com/price-oracle-manipulation-attack-on-inverse-finance-a5544218ea91

https://www.certik.com/resources/blog/6LbL57WA3iMNm8zd7q111R-inverse-finance-incident-analysis

https://etherscan.io/tx/0x958236266991bc3fe3b77feaacea120f172c0708ad01c7a715b255f218f9313c

---

### 20220608 GYMNetwork - Accesscontrol

#### Lost: $2.1 million

Testing

```sh
forge test --contracts ./src/test/2022-06/Gym_2_exp.sol -vv
```

#### Contract

[Gym_2_exp.sol](../../src/test/2022-06/Gym_2_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1534423219607719936

https://twitter.com/1nf0s3cpt/status/1534464698069884929

https://www.jinse.com/news/blockchain/1658455.html

---

### 20220608 Optimism - Wintermute

#### Lost: 20 million Optimism (OP) tokens returned 17 million of them

Testing

```sh
forge test --contracts ./src/test/2022-06/Optimism_exp.sol -vv
```

#### Contract

[Optimism_exp.sol](../../src/test/2022-06/Optimism_exp.sol)

#### Link reference

https://inspexco.medium.com/how-20-million-op-was-stolen-from-the-multisig-wallet-not-yet-owned-by-wintermute-3f6c75db740a

https://optimistic.etherscan.io/tx/0x75a42f240d229518979199f56cd7c82e4fc1f1a20ad9a4864c635354b4a34261

https://optimistic.etherscan.io/tx/0x00a3da68f0f6a69cb067f09c3f7e741a01636cbc27a84c603b468f65271d415b

---

### 20220606 Discover - Flashloan & Price Oracle Manipulation

#### Lost: 49 BNB

Testing

```sh
forge test --contracts ./src/test/2022-06/Discover_exp.sol -vv
```

#### Contract

[Discover_exp.sol](../../src/test/2022-06/Discover_exp.sol)

#### Link reference

https://www.twitter.com/BeosinAlert/status/1533734518623899648

https://www.anquanke.com/post/id/274003

https://bscscan.com/tx/0x8a33a1f8c7af372a9c81ede9e442114f0aabb537e5c3a22c0fd7231c4820f1e9

https://bscscan.com/tx/0x1dd4989052f69cd388f4dfbeb1690a3f3a323ebb73df816e5ef2466dc98fa4a4

---

### 20220529 NOVO Protocol - Flashloan & Price Oracle Manipulation

#### Lost: 279 BNB

Testing

```sh
forge test --contracts ./src/test/2022-05/Novo_exp.sol -vvv
```

#### Contract

[Novo_exp.sol](../../src/test/2022-05/Novo_exp.sol)

#### Link reference

https://www.panewslab.com/zh_hk/articledetails/f40t9xb4.html

https://bscscan.com/tx/0xc346adf14e5082e6df5aeae650f3d7f606d7e08247c2b856510766b4dfcdc57f

https://bscscan.com/address/0xa0787daad6062349f63b7c228cbfd5d8a3db08f1#code

---

### 20220524 HackDao - Skim token balance

Testing

```sh
forge test --contracts ./src/test/2022-05/HackDao_exp.sol -vvv
```

#### Contract

[HackDao_exp.sol](../../src/test/2022-05/HackDao_exp.sol)

### Link reference

https://twitter.com/BlockSecTeam/status/1529084919976034304

---

### 20220517 ApeCoin (APE) - Flashloan

#### Lost: $1.1 million

buys vault token -> redeems NFTs -> claims airdrop of 60k APE -> re-supply's the pool
Testing

```sh
forge test --contracts ./src/test/2022-05/Bayc_apecoin_exp.sol -vvv
```

#### Contract

[Bayc_apecoin_exp.sol](../../src/test/2022-05/Bayc_apecoin_exp.sol)

#### Link reference

https://etherscan.io/tx/0xeb8c3bebed11e2e4fcd30cbfc2fb3c55c4ca166003c7f7d319e78eaab9747098

https://news.coincu.com/73892-the-flashloan-attack-on-the-ape-airdrop-to-claim-1-1-million-of-ape-tokens/

---

### 20220508 Fortress Loans - Malicious Proposal & Price Oracle Manipulation

#### Lost: 1,048.1 ETH + 400,000 DAI (~$3.00M)

Testing

```sh
forge test --contracts ./src/test/2022-05/FortressLoans.exp.sol -vvv
```

#### Contract

[FortressLoans_exp.sol](../../src/test/2022-05/FortressLoans_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1523530484877209600

https://www.certik.com/resources/blog/k6eZOpnK5Kdde7RfHBZgw-fortress-loans-exploit

---

### 20220430 Saddle Finance - Swap Metapool Attack

### Lost: $10 million

Testing

```sh
forge test --contracts ./src/test/2022-04/Saddle_exp.sol -vvv
```

#### Contract

[Saddle_exp.sol](../../src/test/2022-04/Saddle_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1520330006710616064

https://medium.com/immunefi/hack-analysis-saddle-finance-april-2022-f2bcb119f38

https://github.com/Hephyrius/Immuni-Saddle-POC

### 20220430 Rari Capital/Fei Protocol - Flashloan Attack + Reentrancy

#### Lost: $80 million

Testing

```sh
forge test --contracts ./src/test/2022-04/Rari_exp.sol -vv
```

#### Contract

[Rari_exp.sol](../../src/test/2022-04/Rari_exp.sol)

#### Link reference

https://certik.medium.com/fei-protocol-incident-analysis-8527440696cc

https://twitter.com/peckshield/status/1520369315698016256

https://etherscan.io/tx/0xab486012f21be741c9e674ffda227e30518e8a1e37a5f1d58d0b0d41f6e76530

---

### 20220428 DEUS DAO - Flashloan & Price Oracle Manipulation

#### Lost: $13 million

Testing

```sh
forge test --contracts ./src/test/2022-04/deus_exp.sol -vv
```

#### Contract

[deus_exp.sol](../../src/test/2022-04/deus_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1519531866109317121

https://ftmscan.com/tx/0xe374495036fac18aa5b1a497a17e70f256c4d3d416dd1408c026f3f5c70a3a9c

---

### 20220424 Wiener DOGE - Flashloan

#### Lost: 78 BNB

Testing

```sh
forge test --contracts ./src/test/2022-04/Wdoge_exp.sol -vvv

```

#### Contract

[Wdoge_exp.sol](../../src/test/2022-04/Wdoge_exp.sol)

#### Link reference

https://coinyuppie.com/four-combinations-of-hackers-analysis-of-attacks-on-wiener-doge-last-kilometer-medamon-and-pidao-projects/

https://twitter.com/solid_group_1/status/1519034573354676224

https://bscscan.com/tx/0x4f2005e3815c15d1a9abd8588dd1464769a00414a6b7adcbfd75a5331d378e1d

---

### 20220423 Akutar NFT - Denial of Service

#### Lost: 34M USD

Testing

```sh
forge test --contracts ./src/test/2022-04/AkutarNFT_exp.sol -vv
```

#### Contract

[AkutarNFT_exp.sol](../../src/test/2022-04/AkutarNFT_exp.sol)

#### Link reference

https://blocksecteam.medium.com/how-akutar-nft-loses-34m-usd-60d6cb053dff

https://etherscan.io/address/0xf42c318dbfbaab0eee040279c6a2588fa01a961d#code

---

### 20220421 Zeed Finance - Incorrect calculation

#### Lost: $1 million

Testing

```sh
forge test --contracts ./src/test/2022-04/Zeed_exp.sol -vv
```

#### Contract

[Zeed_exp.sol](../../src/test/2022-04/Zeed_exp.sol)

#### Link reference

https://www.cryptotimes.io/hacker-leaves-1m-to-self-destruct-after-zeed-protocol-exploit/

https://medium.com/@zeedcommunity/the-solution-for-the-yeed-lp-pool-attack-a120c53948cd

https://bscscan.com/tx/0x0507476234193a9a5c7ae2c47e4c4b833a7c3923cefc6fd7667b72f3ca3fa83a

---

### 20220416 BeanstalkFarms - DAO + Flashloan

#### Lost: $182 million

Testing

```sh
forge test --contracts ./src/test/2022-04/Beanstalk_exp.sol -vv
```

#### Contract

[Beanstalk_exp.sol](../../src/test/2022-04/Beanstalk_exp.sol)

#### Link reference

https://rekt.news/beanstalk-rekt/

https://medium.com/uno-re/beanstalk-farms-hacked-total-damage-is-182-million-b699dd3e5c8

https://twitter.com/peckshield/status/1515680335769456640

https://etherscan.io/tx/0x68cdec0ac76454c3b0f7af0b8a3895db00adf6daaf3b50a99716858c4fa54c6f

https://etherscan.io/tx/0xcd314668aaa9bbfebaf1a0bd2b6553d01dd58899c508d4729fa7311dc5d33ad7

---

### 20220415 Rikkei Finance - Access control & Price Oracle Manipulation

#### Lost: $1.1 million (2671 BNB)

Testing

```sh
forge test --contracts ./src/test/2022-04/Rikkei_exp.sol -vv
```

#### Contract

[Rikkei_exp.sol](../../src/test/2022-04/Rikkei_exp.sol)

#### Link reference

https://blockmagnates.com/rikkei-finance-hack/

https://knownseclab.com/news/625e865cf1c544005a4bdaf2

https://rikkeifinance.medium.com/rikkei-finance-incident-investigation-report-b5b1745b0155

https://bscscan.com/tx/0x93a9b022df260f1953420cd3e18789e7d1e095459e36fe2eb534918ed1687492

---

### 20220412 ElephantMoney - Flashloan & Price Oracle Manipulation

#### Lost: $11.2 million (27,416.46 BNB)

Testing

```sh
forge test --contracts ./src/test/2022-04/Elephant_Money_exp.sol -vv
```

#### Contract

[Elephant_Money_exp.sol](../../src/test/2022-04/Elephant_Money_exp.sol)

#### Link reference

https://medium.com/elephant-money/reserve-exploit-52fd36ccc7e8

https://twitter.com/peckshield/status/1514023036596330496

https://twitter.com/BlockSecTeam/status/1513966074357698563

https://bscscan.com/tx/0xec317deb2f3efdc1dbf7ed5d3902cdf2c33ae512151646383a8cf8cbcd3d4577

---

### 20220411 Creat Future - Overflow

#### Lost: $1.9 million

Testing

```sh
forge test --contracts ./src/test/2022-04/cftoken_exp.sol -vv
```

#### Contract

[cftoken_exp.sol](../../src/test/2022-04/cftoken_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1556497016016228358

https://bscscan.com/tx/0xc7647406542f8f2473a06fea142d223022370aa5722c044c2b7ea030b8965dd0

---

### 20220409 GYMNetwork - Flashloan + token migrate flaw

#### Lost: 1,327 WBNB

Testing

```sh
forge test --contracts ./src/test/2022-04/Gym_1_exp.sol -vv
```

#### Contract

[Gym_1_exp.sol](../../src/test/2022-04/Gym_1_exp.sol)

#### Link reference

https://twitter.com/BlockSecTeam/status/1512832398643265537

https://medium.com/@Beosin_com/beosin-analysis-of-the-attack-on-gymdefi-e5a23bfd93fe

https://bscscan.com/tx/0xa5b0246f2f8d238bb56c0ddb500b04bbe0c30db650e06a41e00b6a0fff11a7e5

---

### 20220329 Ronin Network - Bridge

#### Lost: $624 million

Testing

```sh
forge test --contracts ./src/test/2022-03/Ronin_exp.sol -vv
```

#### Contract

[Ronin_exp.sol](../../src/test/2022-03/Ronin_exp.sol)

#### Link reference

https://rekt.news/ronin-rekt/

https://etherscan.io/tx/0xc28fad5e8d5e0ce6a2eaf67b6687be5d58113e16be590824d6cfa1a94467d0b7

https://etherscan.io/tx/0xed2c72ef1a552ddaec6dd1f5cddf0b59a8f37f82bdda5257d9c7c37db7bb9b08

---

### 20220329 Redacted Cartel - Custom Approval Logic

Testing

```sh
forge test --contracts ./src/test/2022-03/RedactedCartel_exp.sol -vv
```

#### Contract

[RedactedCartel_exp.sol](../../src/test/2022-03/RedactedCartel_exp.sol)

#### Link reference

https://medium.com/immunefi/redacted-cartel-custom-approval-logic-bugfix-review-9b2d039ca2c5

---

### 20220327 Revest Finance - Reentrancy

#### Lost: $11.2 million

Testing

```sh
forge test --contracts ./src/test/2022-03/Revest_exp.sol -vv
```

#### Contract

[Revest_exp.sol](../../src/test/2022-03/Revest_exp.sol)

#### Link reference

https://blocksecteam.medium.com/revest-finance-vulnerabilities-more-than-re-entrancy-1609957b742f

https://etherscan.io/tx/0xe0b0c2672b760bef4e2851e91c69c8c0ad135c6987bbf1f43f5846d89e691428

---

### 20220326 Auctus - Arbitrary Call

#### Lost: $726 k

Testing

```sh
forge test --contracts ./src/test/2022-03/Auctus_exp.sol -vv
```

#### Contract

[Auctus_exp.sol](../../src/test/2022-03/Auctus_exp.sol)

#### Link reference

https://twitter.com/AuctusOptions/status/1508647849663291398?cxt=HHwWjICzpbzO5e8pAAAA

https://etherscan.io/tx/0x2e7d7e7a6eb157b98974c8687fbd848d0158d37edc1302ea08ee5ddb376befea

---

### 20220322 CompoundTUSDSweepTokenBypass - Insufficient validation

Testing

```sh
forge test --contracts ./src/test/2022-03/CompoundTusd_exp.sol -vv
```

#### Contract

[CompoundTusd_exp.sol](../../src/test/2022-03/CompoundTusd_exp.sol)

#### Link reference

https://blog.openzeppelin.com/compound-tusd-integration-issue-retrospective/

---

### 20220321 OneRing Finance - Flashloan & Price Oracle Manipulation

#### Lost: $1.45 million

Testing

```sh
forge test --contracts ./src/test/2022-03/OneRing_exp.sol -vv
```

#### Contract

[OneRing_exp.sol](../../src/test/2022-03/OneRing_exp.sol)

#### Link reference

https://medium.com/oneringfinance/onering-finance-exploit-post-mortem-after-oshare-hack-602a529db99b

https://ftmscan.com/tx/0xca8dd33850e29cf138c8382e17a19e77d7331b57c7a8451648788bbb26a70145

---

### 20220320 Li.Fi - Bridges

#### Lost: $570K

Testing

```sh
forge test --contracts ./src/test/2022-03/LiFi_exp.sol -vvvv
```

#### Contract

[LiFi_exp.sol](../../src/test/2022-03/LiFi_exp.sol)

#### Link reference

https://blog.li.fi/20th-march-the-exploit-e9e1c5c03eb9

https://twitter.com/lifiprotocol/status/1505738407938387971

https://etherscan.io/tx/0x4b4143cbe7f5475029cf23d6dcbb56856366d91794426f2e33819b9b1aac4e96

#### Fix

implemented a whitelist to only allow calls to approved DEXs.

---

### 20220320 Umbrella Network - Underflow

Testing

```sh
forge test --contracts ./src/test/2022-03/Umbrella_exp.sol -vv
```

#### Contract

[Umbrella_exp.sol](../../src/test/2022-03/Umbrella_exp.sol)

#### Link reference

https://medium.com/uno-re/umbrella-network-hacked-700k-lost-97285b69e8c7

https://etherscan.io/tx/0x33479bcfbc792aa0f8103ab0d7a3784788b5b0e1467c81ffbed1b7682660b4fa

---

### 20220313 Hundred Finance - ERC667 Reentrancy

#### Lost: $1.7 million

Testing

```sh
forge test --contracts ./src/test/2022-03/HundredFinance_exp.sol -vv
```

#### Contract

[HundredFinance_exp.sol](../../src/test/2022-03/HundredFinance_exp.sol)

#### Link reference

https://medium.com/immunefi/a-poc-of-the-hundred-finance-heist-4121f23a098

https://gnosisscan.io/tx/0x534b84f657883ddc1b66a314e8b392feb35024afdec61dfe8e7c510cfac1a098

---

### 20220315 Agave Finance - ERC667 Reentrancy

#### Lost: $1.5 million

Testing

```sh
forge test --contracts ./src/test/2022-03/Agave_exp.sol -vv
```

#### Contract

[Agave_exp.sol](../../src/test/2022-03/Agave_exp.sol)

#### Link reference

https://medium.com/agavefinance/agave-exploit-reentrancy-in-liquidation-call-51ae407bc56
https://gnosisscan.io/tx/0xa262141abcf7c127b88b4042aee8bf601f4f3372c9471dbd75cb54e76524f18e

---

### 20220313 Paraluni - Flashloan & Reentrancy

#### Lost: $1.7 million

Testing

```sh
forge test --contracts ./src/test/2022-03/Paraluni_exp.sol -vv
```

#### Contract

[Paraluni_exp.sol](../../src/test/2022-03/Paraluni_exp.sol)

#### Link reference

https://halborn.com/explained-the-paraluni-hack-march-2022/

https://twitter.com/peckshield/status/1502815435498176514

https://mobile.twitter.com/paraluni/status/1502951606202994694

https://zhuanlan.zhihu.com/p/517535530

https://bscscan.com/tx/0x70f367b9420ac2654a5223cc311c7f9c361736a39fd4e7dff9ed1b85bab7ad54

---

### 20220309 Fantasm Finance - Business logic in mint()

#### Lost: $2.6 million

Testing

```sh
forge test --contracts ./src/test/2022-03/Fantasm_exp.sol -vv
```

#### Contract

[Fantasm_exp.sol](../../src/test/2022-03/Fantasm_exp.sol)

#### Link reference

https://twitter.com/fantasm_finance/status/1501569232881995785

https://medium.com/quillhash/fantom-based-protocol-fantasm-suffers-2-6m-exploit-32de8191ccd4

https://www.certik.com/resources/blog/5p92144WQ44Ytm1AL4Jt9X-fantasm-finance

---

### 20220305 Bacon Protocol - Reentrancy

#### Lost: $1 million

Testing

```sh
forge test --contracts ./src/test/2022-03/Bacon_exp.sol -vv
```

#### Contract

[Bacon_exp.sol](../../src/test/2022-03/Bacon_exp.sol)

#### Link reference

https://twitter.com/peckshield/status/1500105933128495108

https://etherscan.io/tx/0xacfcaa8e1c482148f9f2d592c78ca7a27934c7333dab31978ed0aef333a28ab6

https://etherscan.io/tx/0x7d2296bcb936aa5e2397ddf8ccba59f54a178c3901666b49291d880369dbcf31

---

### 20220303 TreasureDAO - Zero Fee

#### Lost: $1 million

Testing

```sh
forge test --contracts ./src/test/2022-03/TreasureDAO_exp.sol -vv
```

#### Contract

[TreasureDAO_exp.sol](../../src/test/2022-03/TreasureDAO_exp.sol)

#### Link reference

https://slowmist.medium.com/analysis-of-the-treasuredao-zero-fee-exploit-73791f4b9c14

https://arbiscan.io/tx/0x82a5ff772c186fb3f62bf9a8461aeadd8ea0904025c3330a4d247822ff34bc02

---

### 20220214 BuildFinance - DAO

#### Lost: $470k

Testing

```sh
forge test --contracts ./src/test/2022-02/BuildF_exp.sol -vv
```

#### Contract

[BuildF_exp.sol](../../src/test/2022-02/BuildF_exp.sol)

#### Link reference

https://twitter.com/finance_build/status/1493223190071554049

https://www.cryptotimes.io/build-finance-suffered-hostile-governance-takeover-lost-470k/

https://etherscan.io/tx/0x544e5849b71b98393f41d641683586d0b519c46a2eeac9bcb351917f40258a85

---

### 20220208 Sandbox LAND - Access control

Testing

```sh
forge test --contracts ./src/test/2022-02/Sandbox_exp.sol -vv
```

#### Contract

[Sandbox_exp.sol](../../src/test/2022-02/Sandbox_exp.sol)

#### Link reference

https://slowmist.medium.com/the-vulnerability-behind-the-sandbox-land-migration-2abf68933170

https://etherscan.io/tx/0x34516ee081c221d8576939f68aee71e002dd5557180d45194209d6692241f7b1

---

### 20220206 Meter - Bridge

#### Lost: $4.3 million

Testing

```sh
Solana TBD
forge test --contracts ./src/test/2022-02/Meter_exp.sol -vv
```

#### Contract

[Meter_exp.sol](../../src/test/2022-02/Meter_exp.sol)

#### Link reference

https://twitter.com/ishwinder/status/1490227406824685569

https://blog.chainsafe.io/breaking-down-the-meter-io-hack-a46a389e7ae4

this does not seem to be the correct transaction though:
https://moonriver.moonscan.io/tx/0x5a87c24d0665c8f67958099d1ad22e39a03aa08d47d00b7276b8d42294ee0591

---

### 20220204 TecraSpace - Any token is destroyed

#### Lost: ~63k $USDT

Testing

```sh
forge test --contracts ./src/test/2022-02/TecraSpace_exp.sol -vv
```

#### Contract

[TecraSpace_exp.sol](../../src/test/2022-02/TecraSpace_exp.sol)

#### Link reference

https://etherscan.io/address/0x6653d9bcbc28fc5a2f5fb5650af8f2b2e1695a15

https://app.blocksec.com/explorer/tx/eth/0x81e9918e248d14d78ff7b697355fd9f456c6d7881486ed14fdfb69db16631154

---

### 20220128 Qubit Finance - Bridge address(0).safeTransferFrom() does not revert

#### Lost: $80 million

Testing

```sh
forge test --contracts ./src/test/2022-01/Qubit_exp.sol -vv
```

#### Contract

[Qubit_exp.sol](../../src/test/2022-01/Qubit_exp.sol)

#### Link reference

https://rekt.news/qubit-rekt/

https://medium.com/@QubitFin/protocol-exploit-report-305c34540fa3

https://etherscan.io/address/0xd01ae1a708614948b2b5e0b7ab5be6afa01325c7
https://etherscan.io/tx/0xac7292e7d0ec8ebe1c94203d190874b2aab30592327b6cc875d00f18de6f3133
https://bscscan.com/tx/0x50946e3e4ccb7d39f3512b7ecb75df66e6868b9af0eee8a7e4b61ef8a459518e

---

### 20220118 Multichain (Anyswap) - Insufficient Token Validation

#### Lost: $1.4 million

Testing

```sh
forge test --contracts ./src/test/2022-01/Anyswap_exp.sol -vv
```

#### Contract

[Anyswap_exp.sol](../../src/test/2022-01/Anyswap_exp.sol)

#### Link reference

https://medium.com/zengo/without-permit-multichains-exploit-explained-8417e8c1639b

https://twitter.com/PeckShieldAlert/status/1483363515411099651

https://etherscan.io/tx/0xe50ed602bd916fc304d53c4fed236698b71691a95774ff0aeeb74b699c6227f7