8000 GitHub - artemis-academy/hundred-finance-poc: PoC of the Hundred Finance March 2022 exploit
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

artemis-academy/hundred-finance-poc

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Hundred Finance PoC of March 2022 exploit

This PoC is heavily inspired on Hephyrius.eth's article written on Immunefi's blog.

Brief description

The Hundred Finance protocol is a Compound fork that was also deployed on Gnosis Chain. Due to Gnosis's Omnibridge functionality, all bridged ERC20s are ERC677 - an extension to ERC20 that adds a callback to the transfer method. Because of that, the borrow function on the CToken will allow for a reentrance into the protocol, to allow borrowing on another market with the same collateral and no registered debt.

This PoC uses UniswapV2 contracts (Sushiswap flashloan), Compound contracts (Hundred Finance) and the CurveFinance protocol (curve 3 pool swap).

Test command

forge test --fork-url FORK_URL --fork-block-number 21120000

RPC provider

You can create a Gnosis Chain endpoint in Quicknode and have access to archival node states.

About

PoC of the Hundred Finance March 2022 exploit

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published
0