uups-checker 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (670) hide show
  1. package/.gitmodules +6 -0
  2. package/AIFI_AUDIT.md +220 -0
  3. package/ALL_AUDITS_SUMMARY.md +366 -0
  4. package/ALPHA_PROXY_CRITICAL_FINDING.md +136 -0
  5. package/ALPHA_PROXY_FINAL_ANALYSIS.md +213 -0
  6. package/ALPHA_PROXY_FINAL_VERDICT.md +233 -0
  7. package/ALPHA_PROXY_SELFDESTRUCT_EXPLOIT.md +161 -0
  8. package/ARIA-foundry-test.txt +9 -0
  9. package/ARIA-mythril-analysis.txt +20 -0
  10. package/ARIA-slither-analysis.txt +38 -0
  11. package/ARIA_AI_SECURITY_AUDIT.md +290 -0
  12. package/ARIA_VERIFIED_AUDIT.md +259 -0
  13. package/ARIA_VERIFIED_slither.txt +76 -0
  14. package/ARIVA_source.txt +1 -0
  15. package/ARK_AUDIT.md +349 -0
  16. package/BANANA_AUDIT.md +365 -0
  17. package/BAS_AUDIT.md +451 -0
  18. package/BAS_TOKEN_AUDIT.md +235 -0
  19. package/BCE_EXPLOIT_ANALYSIS.md +165 -0
  20. package/BEEFY_BNB_CHAIN_ANALYSIS.md +488 -0
  21. package/BEEFY_MONAD_ANALYSIS.md +239 -0
  22. package/BEEFY_STAKING_ANALYSIS.md +136 -0
  23. package/BEEFY_XVS_WBNB_ACTUAL_FINDINGS.md +223 -0
  24. package/BEEFY_XVS_WBNB_CRITICAL_FINDINGS.md +269 -0
  25. package/BLOCKSEC_ATTACK_KNOWLEDGE_BASE.md +771 -0
  26. package/BRISE_ANALYSIS.txt +31 -0
  27. package/BRISE_BSC_DAPPS.txt +68 -0
  28. package/BRISE_EXPLOITS_FOUND.md +98 -0
  29. package/BRISE_REAL_EXPLOITS.md +115 -0
  30. package/BRISE_WHITEHAT_REPORT.md +162 -0
  31. package/BRISEstake_Analysis.txt +95 -0
  32. package/BSCSLOCKTOKEN_CRITICAL_FINDING.md +240 -0
  33. package/BSW_BISWAP_SECURITY_AUDIT.md +330 -0
  34. package/BTCST_FINAL_VERDICT.md +319 -0
  35. package/BTCST_MINING_REBASE_ANALYSIS.md +229 -0
  36. package/BTCST_ROUNDING_DEEP_DIVE.md +293 -0
  37. package/BTCST_ROUNDING_FINAL_VERDICT.md +9 -0
  38. package/BTCST_SECURITY_ANALYSIS.md +391 -0
  39. package/BTR_AUDIT.md +210 -0
  40. package/BeamBridge-analysis.md +226 -0
  41. package/BeamToken-analysis.md +201 -0
  42. package/BitgertSwap_Investigation.txt +107 -0
  43. package/CEEK_STAKING_ANALYSIS.md +0 -0
  44. package/CHAINBASE_AUDIT.md +422 -0
  45. package/COMPLETE_AUDIT_SUMMARY.md +342 -0
  46. package/CORRECTED_ANALYSIS.txt +115 -0
  47. package/DBXEN_COMPARISON_SUMMARY.md +232 -0
  48. package/DBXEN_EXPLOIT_ANALYSIS.md +530 -0
  49. package/DOPFairLaunch_raw.json +29 -0
  50. package/DOPFairLaunch_source.txt +0 -0
  51. package/DOP_BRIDGE_FINAL_ANALYSIS.txt +86 -0
  52. package/DOP_BUSD_LP_ANALYSIS.txt +44 -0
  53. package/DOP_FAIRLAUNCH_ANALYSIS.txt +61 -0
  54. package/DOP_FAIRLAUNCH_FINAL_VERDICT.txt +113 -0
  55. package/DOP_STAKING_CONTRACT_ANALYSIS.txt +67 -0
  56. package/DSYNC_ECOSYSTEM_ANALYSIS.md +221 -0
  57. package/DSyncStaking-exploit-analysis.md +153 -0
  58. package/DSyncVault-analysis.md +120 -0
  59. package/DUSD_PROXY_AUDIT.md +407 -0
  60. package/DXSALE_LOCK_AUDIT.md +0 -0
  61. package/DXSaleLock_bytecode.txt +1 -0
  62. package/ECHIDNA_QUICK_START.md +101 -0
  63. package/ELEPHANT_ECOSYSTEM_AUDIT_PLAN.md +159 -0
  64. package/ELEPHANT_ECOSYSTEM_COMPREHENSIVE_AUDIT.md +427 -0
  65. package/ELEPHANT_SECURITY_ANALYSIS.md +209 -0
  66. package/ELEPHANT_VULNERABILITIES_EXPLAINED.md +455 -0
  67. package/EXPLOIT_FIX.md +300 -0
  68. package/EXPLOIT_INSTRUCTIONS.md +273 -0
  69. package/EXPLOIT_SUMMARY.md +285 -0
  70. package/EXPLOIT_SUMMARY.txt +175 -0
  71. package/FALCON_FINANCE_AUDIT.md +258 -0
  72. package/FANDOM_AUDIT.md +359 -0
  73. package/FEE_ON_TRANSFER_ANALYSIS.md +228 -0
  74. package/FINAL_AUDIT_REPORT.md +0 -0
  75. package/FOLIO_PROXY_AUDIT.md +299 -0
  76. package/FOT_EXPLOIT_RESULTS.txt +110 -0
  77. package/FOT_TOKENS_AUDITED.md +103 -0
  78. package/HEGIC-mythril-analysis.txt +39 -0
  79. package/HEGIC_COMPLETE_ANALYSIS.md +343 -0
  80. package/HOTCROSS_SWAP_EXPLOIT_ANALYSIS.md +123 -0
  81. package/ICECREAMSWAP_EXPLOITS.md +259 -0
  82. package/IMMUNEFI_REPORT.md +314 -0
  83. package/KCCPAD_EXPLOIT_GUIDE.md +285 -0
  84. package/KEL_CEL_EXPLOIT_ANALYSIS.md +0 -0
  85. package/KOGE_AUDIT.md +328 -0
  86. package/LENDFLARE_ANALYSIS.md +239 -0
  87. package/LENDFLARE_ECHIDNA_GUIDE.md +356 -0
  88. package/LENDFLARE_EXPLOIT_INSTRUCTIONS.md +297 -0
  89. package/LENDFLARE_EXPLOIT_SUMMARY.md +292 -0
  90. package/LENDFLARE_FLASHLOAN_GUIDE.md +383 -0
  91. package/LENDFLARE_FUZZING_RESULTS.md +252 -0
  92. package/LENDFLARE_HONEYPOT_BYPASS_ANALYSIS.md +420 -0
  93. package/LENDFLARE_MANUAL_FUZZING.md +324 -0
  94. package/LENDFLARE_MYTHRIL_ANALYSIS.md +339 -0
  95. package/LENDFLARE_V3_BYPASS.md +296 -0
  96. package/LFTDECOMPILE.txt +14478 -0
  97. package/LFT_ACCOUNTING_ANALYSIS.md +0 -0
  98. package/LFT_ACCOUNTING_BUG_ANALYSIS.md +426 -0
  99. package/LFT_BACKDOOR_DEEP_DIVE.md +0 -0
  100. package/LFT_CRITICAL_EXPLOIT_CONFIRMED.md +428 -0
  101. package/LFT_EXPLOIT_VISUAL.md +253 -0
  102. package/LFT_QUICK_SUMMARY.md +124 -0
  103. package/LFT_REVERSE_EXPLOIT_ANALYSIS.md +521 -0
  104. package/MGO_AUDIT_REPORT.md +420 -0
  105. package/MYTHRIL_FINAL_REPORT.md +306 -0
  106. package/MYTHRIL_SLITHER_SUMMARY.md +244 -0
  107. package/NETX_MIGRATION_AUDIT.md +0 -0
  108. package/NPM_PUBLISH_GUIDE.md +0 -0
  109. package/NRV_CRITICAL_EXPLOIT.txt +143 -0
  110. package/NetX_Analysis.txt +76 -0
  111. package/NetX_Migration_bytecode.txt +1 -0
  112. package/NetX_Migration_source.txt +0 -0
  113. package/NetX_Token_source.txt +0 -0
  114. package/NetxWhitehatRescue +22 -0
  115. package/OILER_ATTACK_VISUAL.md +351 -0
  116. package/OILER_BLOCKSEC_TEST_RESULTS.md +421 -0
  117. package/OILER_DEEP_ANALYSIS.md +212 -0
  118. package/OILER_FINAL_EXPLOIT_REPORT.md +241 -0
  119. package/OILER_FINAL_VERDICT.md +339 -0
  120. package/OILER_REENTRANCY_EXPLAINED.md +638 -0
  121. package/OILER_REENTRANCY_FINAL_SUMMARY.md +391 -0
  122. package/OILER_REENTRANCY_REALITY_CHECK.md +393 -0
  123. package/OILER_REENTRANCY_STEP_BY_STEP.md +597 -0
  124. package/OILER_STAKING_MAINNET_ANALYSIS.md +366 -0
  125. package/OILER_STAKING_SECURITY_ANALYSIS.md +409 -0
  126. package/PANCAKESWAP_UNDERFLOW_HUNTING.md +317 -0
  127. package/POLS_MULTICHAIN_AUDIT.md +0 -0
  128. package/POSI_STAKING_AUDIT.md +0 -0
  129. package/PROXY2_SECURITY_ANALYSIS.md +0 -0
  130. package/Proxy2TACS +29748 -0
  131. package/QUICK_START.md +240 -0
  132. package/RAMP_SECURITY_ANALYSIS.md +0 -0
  133. package/README.md +238 -0
  134. package/REAUDIT_MASTER_LIST.txt +15 -0
  135. package/RING_analysis.txt +212 -0
  136. package/RPC +4 -0
  137. package/RULES.txt +20 -0
  138. package/SIREN_AUDIT.md +186 -0
  139. package/SYNC_EXPLOIT_README.md +0 -0
  140. package/SYNC_TOKEN_EXPLOIT_REPORT.md +224 -0
  141. package/TLM_raw.html +0 -0
  142. package/TLM_raw.txt +0 -0
  143. package/TLM_response.json +1 -0
  144. package/TRADOOR_AUDIT.md +253 -0
  145. package/TRUNK_AUDIT.md +285 -0
  146. package/UNIBASE_AUDIT.md +241 -0
  147. package/UNLOCK_ANALYSIS.md +0 -0
  148. package/UNLOCK_EXPLOIT.md +49 -0
  149. package/UNLOCK_EXPLOIT_ANALYSIS.md +0 -0
  150. package/UPS +232 -0
  151. package/UUPSCHECKER +208 -0
  152. package/VAULT_PROXY_AUDIT.md +457 -0
  153. package/VAULT_PROXY_FINAL_VERDICT.md +0 -0
  154. package/VERIFIED_EXPLOITS_FINAL.txt +146 -0
  155. package/WKEYDAO2_AUDIT.md +245 -0
  156. package/WSG_AUDIT.md +0 -0
  157. package/XFI_DEEP_ANALYSIS.md +327 -0
  158. package/YOOSHI_EXPLOIT_GUIDE.md +119 -0
  159. package/YSDAO_EXPLOIT_GUIDE.md +0 -0
  160. package/agent-4-bundle.md +22490 -0
  161. package/alpha-proxy-echidna.txt +1 -0
  162. package/alpha-proxy-fuzz-results.txt +81 -0
  163. package/alpha-proxy-mythril.txt +2 -0
  164. package/analyze-btcst-farm.js +54 -0
  165. package/analyze-dxsale-lock.js +75 -0
  166. package/analyze-elephant.js +69 -0
  167. package/analyze-fara-rewards.js +109 -0
  168. package/analyze-fara-storage.js +83 -0
  169. package/analyze-lft-transaction.js +158 -0
  170. package/analyze-lock-bytecode.js +59 -0
  171. package/analyze-shegic.js +0 -0
  172. package/analyze-staking-abi.js +0 -0
  173. package/analyze-sxp.js +57 -0
  174. package/analyze-tlm.js +76 -0
  175. package/analyze-trumpet.js +98 -0
  176. package/analyze-unlimited-nft.js +108 -0
  177. package/analyze_elephant.sh +27 -0
  178. package/analyze_vault.sh +32 -0
  179. package/aria-bytecode.txt +1 -0
  180. package/aria_response.json +1 -0
  181. package/ark_temp/README.md +66 -0
  182. package/ark_temp/lib/forge-std/.gitattributes +1 -0
  183. package/ark_temp/lib/forge-std/.github/CODEOWNERS +1 -0
  184. package/ark_temp/lib/forge-std/.github/dependabot.yml +6 -0
  185. package/ark_temp/lib/forge-std/.github/workflows/ci.yml +125 -0
  186. package/ark_temp/lib/forge-std/.github/workflows/sync.yml +36 -0
  187. package/ark_temp/lib/forge-std/CONTRIBUTING.md +193 -0
  188. package/ark_temp/lib/forge-std/LICENSE-APACHE +203 -0
  189. package/ark_temp/lib/forge-std/LICENSE-MIT +25 -0
  190. package/ark_temp/lib/forge-std/README.md +314 -0
  191. package/ark_temp/lib/forge-std/RELEASE_CHECKLIST.md +12 -0
  192. package/ark_temp/lib/forge-std/package.json +16 -0
  193. package/ark_temp/lib/forge-std/scripts/vm.py +636 -0
  194. package/audits/AiFi-security-audit-20260326.md +499 -0
  195. package/audits/BasedAI-Brains-security-audit-20260324.md +651 -0
  196. package/audits/BinanceAlphaWallet-pashov-ai-audit-report-20260324-170000.md +362 -0
  197. package/audits/DGToken-security-audit-20260324.md +376 -0
  198. package/audits/DSyncStaking-audit-part1.md +161 -0
  199. package/audits/DSyncStaking-security-audit-20260324.md +547 -0
  200. package/audits/DecompiledERC20-security-audit-20260325.md +397 -0
  201. package/audits/DegenVC-security-audit-20260324.md +585 -0
  202. package/audits/DelreyInu-security-audit-20260324.md +463 -0
  203. package/audits/DestraNetwork-security-audit-20260324.md +705 -0
  204. package/audits/DomiToken-security-audit-20260324.md +514 -0
  205. package/audits/LendFlareToken-security-audit-20260325.md +197 -0
  206. package/audits/LockReleaseTokenPool-security-audit-20260324.md +482 -0
  207. package/audits/MOG-pashov-ai-audit-report-20260324-164900.md +229 -0
  208. package/audits/PAALAI-security-audit-20260324.md +475 -0
  209. package/audits/PAR-security-audit-20260325.md +311 -0
  210. package/audits/PepeCoinStaking-security-audit-20260324.md +358 -0
  211. package/audits/StakingPool-security-audit-20260324.md +517 -0
  212. package/audits/SyncToken-security-audit-20260324.md +778 -0
  213. package/audits/UndeadToken-decompiled-security-audit-20260324.md +485 -0
  214. package/audits/UnknownToken-decompiled-security-audit-20260324.md +647 -0
  215. package/audits/XFIStaking-security-audit-20260324.md +682 -0
  216. package/audits/Xfinance-security-audit-20260324.md +463 -0
  217. package/audits/basedAIFarm-security-audit-20260324.md +330 -0
  218. package/audits/pepeCoin-security-audit-20260324.md +462 -0
  219. package/bin/ups +232 -0
  220. package/binance-wallet-exploit/.env.example +2 -0
  221. package/binance-wallet-exploit/EXECUTIVE_SUMMARY.md +272 -0
  222. package/binance-wallet-exploit/EXPLOIT_SUMMARY.md +104 -0
  223. package/binance-wallet-exploit/FINAL_ANALYSIS.md +326 -0
  224. package/binance-wallet-exploit/FLASHLOAN_ATTACK.md +292 -0
  225. package/binance-wallet-exploit/HONEYPOT_REPORT.md +526 -0
  226. package/binance-wallet-exploit/INVESTIGATION_COMPLETE.md +362 -0
  227. package/binance-wallet-exploit/LENDFLARE_EXPLOIT.md +219 -0
  228. package/binance-wallet-exploit/LENDFLARE_FINAL_ATTACK.md +307 -0
  229. package/binance-wallet-exploit/LENDFLARE_REAL_EXPLOIT.md +286 -0
  230. package/binance-wallet-exploit/LENDFLARE_RUGPULL.md +269 -0
  231. package/binance-wallet-exploit/LFT_ANALYSIS.md +206 -0
  232. package/binance-wallet-exploit/QUICK_START.md +75 -0
  233. package/binance-wallet-exploit/README.md +195 -0
  234. package/binance-wallet-exploit/REAL_TX_EXPLOIT_ANALYSIS.md +271 -0
  235. package/binance-wallet-exploit/REMIX_INSTRUCTIONS.md +223 -0
  236. package/binance-wallet-exploit/TEST_RESULTS.md +203 -0
  237. package/binance-wallet-exploit/cache/solidity-files-cache.json +1 -0
  238. package/binance-wallet-exploit/cache/test-failures +1 -0
  239. package/binance-wallet-exploit/lib/forge-std/.gitattributes +1 -0
  240. package/binance-wallet-exploit/lib/forge-std/.github/CODEOWNERS +1 -0
  241. package/binance-wallet-exploit/lib/forge-std/.github/dependabot.yml +6 -0
  242. package/binance-wallet-exploit/lib/forge-std/.github/workflows/ci.yml +125 -0
  243. package/binance-wallet-exploit/lib/forge-std/.github/workflows/sync.yml +36 -0
  244. package/binance-wallet-exploit/lib/forge-std/CONTRIBUTING.md +193 -0
  245. package/binance-wallet-exploit/lib/forge-std/LICENSE-APACHE +203 -0
  246. package/binance-wallet-exploit/lib/forge-std/LICENSE-MIT +25 -0
  247. package/binance-wallet-exploit/lib/forge-std/README.md +314 -0
  248. package/binance-wallet-exploit/lib/forge-std/RELEASE_CHECKLIST.md +12 -0
  249. package/binance-wallet-exploit/lib/forge-std/package.json +16 -0
  250. package/binance-wallet-exploit/lib/forge-std/scripts/vm.py +636 -0
  251. package/binance-wallet-exploit/out/build-info/1e9aa7e86cf56962.json +1 -0
  252. package/binance-wallet-exploit/out/build-info/6f56f10e9d7b56eb.json +1 -0
  253. package/binance-wallet-exploit/out/build-info/7edba961ff697a24.json +1 -0
  254. package/binance-wallet-exploit/out/build-info/8c27fe3efea2f2e7.json +1 -0
  255. package/binance-wallet-exploit/out/build-info/978b680daffec63a.json +1 -0
  256. package/binance-wallet-exploit/out/build-info/9806b900b5672d0c.json +1 -0
  257. package/binance-wallet-exploit/out/build-info/b4b9ff36e9b3fc27.json +1 -0
  258. package/binance-wallet-exploit/out/build-info/b6f4df9ae05c0812.json +1 -0
  259. package/binance-wallet-exploit/out/build-info/c88dbc86551f7b5c.json +1 -0
  260. package/binance-wallet-exploit/out/build-info/e9657504010623db.json +1 -0
  261. package/cache/fuzz/failures/ARIAVerifiedFuzzTest/testFuzz_ApprovalRaceCondition +1 -0
  262. package/cache/fuzz/failures/HotCrossSwapFuzzTest/testFuzz_DirectTransferExploit +1 -0
  263. package/cache/fuzz/failures/HotCrossSwapFuzzTest/testFuzz_LargeSwapDrain +1 -0
  264. package/cache/fuzz/failures/LendFlareFuzz/testFuzz_ApprovalExploit +1 -0
  265. package/cache/fuzz/failures/LendFlareFuzz/testFuzz_BalanceManipulation +1 -0
  266. package/cache/fuzz/failures/LendFlareFuzz/testFuzz_RateManipulation +1 -0
  267. package/cache/fuzz/failures/LendFlareFuzz/testFuzz_StorageManipulation +1 -0
  268. package/cache/fuzz/failures/PARFuzzTest/testFuzz_OverflowTransfer +1 -0
  269. package/cache/fuzz/failures/PARFuzzTest/testFuzz_Transfer +1 -0
  270. package/cache/fuzz/failures/XFIDeepFuzz/testFuzz_FrontrunAddfunds +1 -0
  271. package/cache/fuzz/failures/XFIDeepFuzz/testFuzz_RewardOverflow +1 -0
  272. package/cache/fuzz/failures/XFIDeepFuzz/testFuzz_RoundingExploit +1 -0
  273. package/cache/fuzz/failures/XFIDeepFuzz/testFuzz_WithdrawLimit +1 -0
  274. package/cache/solidity-files-cache.json +1 -0
  275. package/cache/test-failures +1 -0
  276. package/calculate-elephant-flashloan.js +195 -0
  277. package/check-address-approval.js +112 -0
  278. package/check-alpha-proxy.js +42 -0
  279. package/check-arbitrage.js +155 -0
  280. package/check-aria-token.js +47 -0
  281. package/check-ark.sh +20 -0
  282. package/check-btcst-mining.js +75 -0
  283. package/check-btcst-pools.js +163 -0
  284. package/check-btcst.js +88 -0
  285. package/check-caller.js +26 -0
  286. package/check-ceek-lp.js +73 -0
  287. package/check-ceek.js +47 -0
  288. package/check-dxsale-address.js +35 -0
  289. package/check-fara-exploit-timing.js +56 -0
  290. package/check-fara-real-exploit.js +73 -0
  291. package/check-flashloan-limits.js +129 -0
  292. package/check-kel-cel-pool.js +91 -0
  293. package/check-lax-staking.js +41 -0
  294. package/check-lendflare.js +165 -0
  295. package/check-lft-accounting.js +109 -0
  296. package/check-lft-roles.js +165 -0
  297. package/check-lock-time.js +47 -0
  298. package/check-min-stake.js +73 -0
  299. package/check-mystery-contract.js +52 -0
  300. package/check-next-token.js +50 -0
  301. package/check-nora-lock.js +67 -0
  302. package/check-oiler-approvals.js +116 -0
  303. package/check-oiler-proxy.js +73 -0
  304. package/check-oiler-staking.js +117 -0
  305. package/check-proxy-simple.js +71 -0
  306. package/check-recent-stakes.js +54 -0
  307. package/check-shegic-holdings.js +67 -0
  308. package/check-snowcrash-ecosystem.js +83 -0
  309. package/check-sync-lp.js +97 -0
  310. package/check-sync-stake.js +42 -0
  311. package/check-tlm.js +37 -0
  312. package/check-token-pools.js +146 -0
  313. package/check-trunk-depeg.js +181 -0
  314. package/check-tusd-decimals.js +58 -0
  315. package/check-user-storage-deep.js +81 -0
  316. package/check-welephant-pools.js +130 -0
  317. package/check-xfi-pool.js +75 -0
  318. package/check-zypher.js +32 -0
  319. package/check_proxy.sh +36 -0
  320. package/compare-tlm-chains.js +90 -0
  321. package/contract_0x05f2.html +6025 -0
  322. package/contract_0x3720.html +6361 -0
  323. package/contract_0x928e.html +5606 -0
  324. package/contract_0xc42d.html +5304 -0
  325. package/contract_page.html +5789 -0
  326. package/decode-stake-tx.js +50 -0
  327. package/deep-analyze-lock.js +82 -0
  328. package/dune_uups_proxy_query.sql +42 -0
  329. package/dune_uups_vulnerable_query.sql +0 -0
  330. package/echidna/alpha-proxy.yaml +14 -0
  331. package/echidna/elephant.yaml +7 -0
  332. package/echidna/lendflare.yaml +42 -0
  333. package/echidna.config.yaml +12 -0
  334. package/elephant_raw.json +1 -0
  335. package/eps_raw.json +1 -0
  336. package/exploit/.github/workflows/test.yml +38 -0
  337. package/exploit/.gitmodules +3 -0
  338. package/exploit/README.md +66 -0
  339. package/exploit/foundry.lock +8 -0
  340. package/exploit/lib/forge-std/.gitattributes +1 -0
  341. package/exploit/lib/forge-std/.github/CODEOWNERS +1 -0
  342. package/exploit/lib/forge-std/.github/dependabot.yml +6 -0
  343. package/exploit/lib/forge-std/.github/workflows/ci.yml +125 -0
  344. package/exploit/lib/forge-std/.github/workflows/sync.yml +36 -0
  345. package/exploit/lib/forge-std/CONTRIBUTING.md +193 -0
  346. package/exploit/lib/forge-std/LICENSE-APACHE +203 -0
  347. package/exploit/lib/forge-std/LICENSE-MIT +25 -0
  348. package/exploit/lib/forge-std/README.md +314 -0
  349. package/exploit/lib/forge-std/RELEASE_CHECKLIST.md +12 -0
  350. package/exploit/lib/forge-std/package.json +16 -0
  351. package/exploit/lib/forge-std/scripts/vm.py +636 -0
  352. package/exploit_analysis.txt +51 -0
  353. package/extract_contract.py +21 -0
  354. package/extract_elephant_contracts.py +24 -0
  355. package/fara-staking-bytecode.txt +1 -0
  356. package/fara-staking-raw.txt +1 -0
  357. package/fetch-aria.js +46 -0
  358. package/fetch-contract.js +50 -0
  359. package/fetch-shegic-source.js +86 -0
  360. package/fetch-snowcrash.js +44 -0
  361. package/fetch-staking-source.js +53 -0
  362. package/fetch-tlm.js +60 -0
  363. package/fetch_elephant_source.py +32 -0
  364. package/find-ceek-staking.js +21 -0
  365. package/find-exploit-tx.js +88 -0
  366. package/find-oiler-holders.js +100 -0
  367. package/find-tlm-holder.js +36 -0
  368. package/find-vulnerable-fund.js +94 -0
  369. package/foundry.lock +8 -0
  370. package/fuzz-all.sh +53 -0
  371. package/get-aria-contract.py +40 -0
  372. package/get-lft-holders.js +89 -0
  373. package/get-tlm-source.sh +8 -0
  374. package/harvest_txs.json +1 -0
  375. package/lft-bytecode-raw.txt +1 -0
  376. package/lft-bytecode.json +1 -0
  377. package/lft-impl.bin +1 -0
  378. package/lft-implementation-bytecode.txt +1 -0
  379. package/lib/forge-std/.gitattributes +1 -0
  380. package/lib/forge-std/.github/CODEOWNERS +1 -0
  381. package/lib/forge-std/.github/dependabot.yml +6 -0
  382. package/lib/forge-std/.github/workflows/ci.yml +125 -0
  383. package/lib/forge-std/.github/workflows/sync.yml +36 -0
  384. package/lib/forge-std/CONTRIBUTING.md +193 -0
  385. package/lib/forge-std/LICENSE-APACHE +203 -0
  386. package/lib/forge-std/LICENSE-MIT +25 -0
  387. package/lib/forge-std/README.md +314 -0
  388. package/lib/forge-std/RELEASE_CHECKLIST.md +12 -0
  389. package/lib/forge-std/package.json +16 -0
  390. package/lib/forge-std/scripts/vm.py +636 -0
  391. package/lib/openzeppelin-contracts/.changeset/config.json +12 -0
  392. package/lib/openzeppelin-contracts/.codecov.yml +12 -0
  393. package/lib/openzeppelin-contracts/.editorconfig +21 -0
  394. package/lib/openzeppelin-contracts/.eslintrc +20 -0
  395. package/lib/openzeppelin-contracts/.github/ISSUE_TEMPLATE/bug_report.md +21 -0
  396. package/lib/openzeppelin-contracts/.github/ISSUE_TEMPLATE/config.yml +4 -0
  397. package/lib/openzeppelin-contracts/.github/ISSUE_TEMPLATE/feature_request.md +14 -0
  398. package/lib/openzeppelin-contracts/.github/PULL_REQUEST_TEMPLATE.md +20 -0
  399. package/lib/openzeppelin-contracts/.github/actions/gas-compare/action.yml +49 -0
  400. package/lib/openzeppelin-contracts/.github/actions/setup/action.yml +21 -0
  401. package/lib/openzeppelin-contracts/.github/actions/storage-layout/action.yml +55 -0
  402. package/lib/openzeppelin-contracts/.github/workflows/actionlint.yml +18 -0
  403. package/lib/openzeppelin-contracts/.github/workflows/changeset.yml +28 -0
  404. package/lib/openzeppelin-contracts/.github/workflows/checks.yml +118 -0
  405. package/lib/openzeppelin-contracts/.github/workflows/docs.yml +19 -0
  406. package/lib/openzeppelin-contracts/.github/workflows/formal-verification.yml +68 -0
  407. package/lib/openzeppelin-contracts/.github/workflows/release-cycle.yml +214 -0
  408. package/lib/openzeppelin-contracts/.github/workflows/upgradeable.yml +34 -0
  409. package/lib/openzeppelin-contracts/.gitmodules +7 -0
  410. package/lib/openzeppelin-contracts/.mocharc.js +4 -0
  411. package/lib/openzeppelin-contracts/.prettierrc +15 -0
  412. package/lib/openzeppelin-contracts/.solcover.js +13 -0
  413. package/lib/openzeppelin-contracts/CHANGELOG.md +972 -0
  414. package/lib/openzeppelin-contracts/CODE_OF_CONDUCT.md +73 -0
  415. package/lib/openzeppelin-contracts/CONTRIBUTING.md +36 -0
  416. package/lib/openzeppelin-contracts/GUIDELINES.md +148 -0
  417. package/lib/openzeppelin-contracts/LICENSE +22 -0
  418. package/lib/openzeppelin-contracts/README.md +107 -0
  419. package/lib/openzeppelin-contracts/RELEASING.md +45 -0
  420. package/lib/openzeppelin-contracts/SECURITY.md +42 -0
  421. package/lib/openzeppelin-contracts/audits/2017-03.md +292 -0
  422. package/lib/openzeppelin-contracts/audits/2018-10.pdf +0 -0
  423. package/lib/openzeppelin-contracts/audits/2022-10-Checkpoints.pdf +0 -0
  424. package/lib/openzeppelin-contracts/audits/2022-10-ERC4626.pdf +0 -0
  425. package/lib/openzeppelin-contracts/audits/2023-05-v4.9.pdf +0 -0
  426. package/lib/openzeppelin-contracts/audits/2023-10-v5.0.pdf +0 -0
  427. package/lib/openzeppelin-contracts/audits/README.md +17 -0
  428. package/lib/openzeppelin-contracts/certora/Makefile +54 -0
  429. package/lib/openzeppelin-contracts/certora/README.md +60 -0
  430. package/lib/openzeppelin-contracts/certora/diff/access_manager_AccessManager.sol.patch +97 -0
  431. package/lib/openzeppelin-contracts/certora/reports/2021-10.pdf +0 -0
  432. package/lib/openzeppelin-contracts/certora/reports/2022-03.pdf +0 -0
  433. package/lib/openzeppelin-contracts/certora/reports/2022-05.pdf +0 -0
  434. package/lib/openzeppelin-contracts/certora/run.js +160 -0
  435. package/lib/openzeppelin-contracts/certora/specs/AccessControl.spec +119 -0
  436. package/lib/openzeppelin-contracts/certora/specs/AccessControlDefaultAdminRules.spec +464 -0
  437. package/lib/openzeppelin-contracts/certora/specs/DoubleEndedQueue.spec +300 -0
  438. package/lib/openzeppelin-contracts/certora/specs/ERC20.spec +352 -0
  439. package/lib/openzeppelin-contracts/certora/specs/ERC20FlashMint.spec +55 -0
  440. package/lib/openzeppelin-contracts/certora/specs/ERC20Wrapper.spec +198 -0
  441. package/lib/openzeppelin-contracts/certora/specs/ERC721.spec +679 -0
  442. package/lib/openzeppelin-contracts/certora/specs/EnumerableMap.spec +333 -0
  443. package/lib/openzeppelin-contracts/certora/specs/EnumerableSet.spec +246 -0
  444. package/lib/openzeppelin-contracts/certora/specs/Initializable.spec +165 -0
  445. package/lib/openzeppelin-contracts/certora/specs/Ownable.spec +77 -0
  446. package/lib/openzeppelin-contracts/certora/specs/Ownable2Step.spec +108 -0
  447. package/lib/openzeppelin-contracts/certora/specs/Pausable.spec +96 -0
  448. package/lib/openzeppelin-contracts/certora/specs/TimelockController.spec +274 -0
  449. package/lib/openzeppelin-contracts/certora/specs/helpers/helpers.spec +7 -0
  450. package/lib/openzeppelin-contracts/certora/specs/methods/IAccessControl.spec +8 -0
  451. package/lib/openzeppelin-contracts/certora/specs/methods/IAccessControlDefaultAdminRules.spec +36 -0
  452. package/lib/openzeppelin-contracts/certora/specs/methods/IERC20.spec +11 -0
  453. package/lib/openzeppelin-contracts/certora/specs/methods/IERC2612.spec +5 -0
  454. package/lib/openzeppelin-contracts/certora/specs/methods/IERC3156FlashBorrower.spec +3 -0
  455. package/lib/openzeppelin-contracts/certora/specs/methods/IERC3156FlashLender.spec +5 -0
  456. package/lib/openzeppelin-contracts/certora/specs/methods/IERC5313.spec +3 -0
  457. package/lib/openzeppelin-contracts/certora/specs/methods/IERC721.spec +17 -0
  458. package/lib/openzeppelin-contracts/certora/specs/methods/IERC721Receiver.spec +3 -0
  459. package/lib/openzeppelin-contracts/certora/specs/methods/IOwnable.spec +5 -0
  460. package/lib/openzeppelin-contracts/certora/specs/methods/IOwnable2Step.spec +7 -0
  461. package/lib/openzeppelin-contracts/certora/specs.json +86 -0
  462. package/lib/openzeppelin-contracts/contracts/access/README.adoc +43 -0
  463. package/lib/openzeppelin-contracts/contracts/finance/README.adoc +14 -0
  464. package/lib/openzeppelin-contracts/contracts/governance/README.adoc +167 -0
  465. package/lib/openzeppelin-contracts/contracts/interfaces/README.adoc +82 -0
  466. package/lib/openzeppelin-contracts/contracts/metatx/README.adoc +12 -0
  467. package/lib/openzeppelin-contracts/contracts/package.json +32 -0
  468. package/lib/openzeppelin-contracts/contracts/proxy/README.adoc +87 -0
  469. package/lib/openzeppelin-contracts/contracts/token/ERC1155/README.adoc +41 -0
  470. package/lib/openzeppelin-contracts/contracts/token/ERC20/README.adoc +67 -0
  471. package/lib/openzeppelin-contracts/contracts/token/ERC721/README.adoc +67 -0
  472. package/lib/openzeppelin-contracts/contracts/token/common/README.adoc +10 -0
  473. package/lib/openzeppelin-contracts/contracts/utils/README.adoc +88 -0
  474. package/lib/openzeppelin-contracts/contracts/vendor/compound/LICENSE +11 -0
  475. package/lib/openzeppelin-contracts/docs/README.md +16 -0
  476. package/lib/openzeppelin-contracts/docs/antora.yml +7 -0
  477. package/lib/openzeppelin-contracts/docs/config.js +21 -0
  478. package/lib/openzeppelin-contracts/docs/modules/ROOT/images/erc4626-attack-3a.png +0 -0
  479. package/lib/openzeppelin-contracts/docs/modules/ROOT/images/erc4626-attack-3b.png +0 -0
  480. package/lib/openzeppelin-contracts/docs/modules/ROOT/images/erc4626-attack-6.png +0 -0
  481. package/lib/openzeppelin-contracts/docs/modules/ROOT/images/erc4626-attack.png +0 -0
  482. package/lib/openzeppelin-contracts/docs/modules/ROOT/images/erc4626-deposit.png +0 -0
  483. package/lib/openzeppelin-contracts/docs/modules/ROOT/images/erc4626-mint.png +0 -0
  484. package/lib/openzeppelin-contracts/docs/modules/ROOT/images/erc4626-rate-linear.png +0 -0
  485. package/lib/openzeppelin-contracts/docs/modules/ROOT/images/erc4626-rate-loglog.png +0 -0
  486. package/lib/openzeppelin-contracts/docs/modules/ROOT/images/erc4626-rate-loglogext.png +0 -0
  487. package/lib/openzeppelin-contracts/docs/modules/ROOT/images/tally-exec.png +0 -0
  488. package/lib/openzeppelin-contracts/docs/modules/ROOT/images/tally-vote.png +0 -0
  489. package/lib/openzeppelin-contracts/docs/modules/ROOT/nav.adoc +23 -0
  490. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/access-control.adoc +204 -0
  491. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/backwards-compatibility.adoc +48 -0
  492. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/crowdsales.adoc +11 -0
  493. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/drafts.adoc +19 -0
  494. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/erc1155.adoc +145 -0
  495. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/erc20-supply.adoc +71 -0
  496. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/erc20.adoc +77 -0
  497. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/erc4626.adoc +214 -0
  498. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/erc721.adoc +79 -0
  499. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/extending-contracts.adoc +77 -0
  500. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/faq.adoc +13 -0
  501. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/governance.adoc +240 -0
  502. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/index.adoc +79 -0
  503. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/tokens.adoc +31 -0
  504. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/upgradeable.adoc +77 -0
  505. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/utilities.adoc +185 -0
  506. package/lib/openzeppelin-contracts/docs/modules/ROOT/pages/wizard.adoc +15 -0
  507. package/lib/openzeppelin-contracts/docs/templates/contract.hbs +111 -0
  508. package/lib/openzeppelin-contracts/docs/templates/helpers.js +46 -0
  509. package/lib/openzeppelin-contracts/docs/templates/page.hbs +4 -0
  510. package/lib/openzeppelin-contracts/docs/templates/properties.js +64 -0
  511. package/lib/openzeppelin-contracts/hardhat/env-artifacts.js +24 -0
  512. package/lib/openzeppelin-contracts/hardhat/env-contract.js +25 -0
  513. package/lib/openzeppelin-contracts/hardhat/ignore-unreachable-warnings.js +45 -0
  514. package/lib/openzeppelin-contracts/hardhat/skip-foundry-tests.js +6 -0
  515. package/lib/openzeppelin-contracts/hardhat/task-test-get-files.js +25 -0
  516. package/lib/openzeppelin-contracts/hardhat.config.js +131 -0
  517. package/lib/openzeppelin-contracts/lib/erc4626-tests/LICENSE +661 -0
  518. package/lib/openzeppelin-contracts/lib/erc4626-tests/README.md +116 -0
  519. package/lib/openzeppelin-contracts/lib/forge-std/.github/workflows/ci.yml +92 -0
  520. package/lib/openzeppelin-contracts/lib/forge-std/.gitmodules +3 -0
  521. package/lib/openzeppelin-contracts/lib/forge-std/LICENSE-APACHE +203 -0
  522. package/lib/openzeppelin-contracts/lib/forge-std/LICENSE-MIT +25 -0
  523. package/lib/openzeppelin-contracts/lib/forge-std/README.md +250 -0
  524. package/lib/openzeppelin-contracts/lib/forge-std/package.json +16 -0
  525. package/lib/openzeppelin-contracts/logo.svg +15 -0
  526. package/lib/openzeppelin-contracts/netlify.toml +3 -0
  527. package/lib/openzeppelin-contracts/package-lock.json +16544 -0
  528. package/lib/openzeppelin-contracts/package.json +96 -0
  529. package/lib/openzeppelin-contracts/remappings.txt +1 -0
  530. package/lib/openzeppelin-contracts/renovate.json +4 -0
  531. package/lib/openzeppelin-contracts/requirements.txt +1 -0
  532. package/lib/openzeppelin-contracts/scripts/checks/compare-layout.js +20 -0
  533. package/lib/openzeppelin-contracts/scripts/checks/compareGasReports.js +243 -0
  534. package/lib/openzeppelin-contracts/scripts/checks/extract-layout.js +38 -0
  535. package/lib/openzeppelin-contracts/scripts/checks/generation.sh +6 -0
  536. package/lib/openzeppelin-contracts/scripts/checks/inheritance-ordering.js +54 -0
  537. package/lib/openzeppelin-contracts/scripts/gen-nav.js +41 -0
  538. package/lib/openzeppelin-contracts/scripts/generate/format-lines.js +16 -0
  539. package/lib/openzeppelin-contracts/scripts/generate/run.js +49 -0
  540. package/lib/openzeppelin-contracts/scripts/generate/templates/Checkpoints.js +247 -0
  541. package/lib/openzeppelin-contracts/scripts/generate/templates/Checkpoints.opts.js +17 -0
  542. package/lib/openzeppelin-contracts/scripts/generate/templates/Checkpoints.t.js +146 -0
  543. package/lib/openzeppelin-contracts/scripts/generate/templates/EnumerableMap.js +283 -0
  544. package/lib/openzeppelin-contracts/scripts/generate/templates/EnumerableSet.js +250 -0
  545. package/lib/openzeppelin-contracts/scripts/generate/templates/SafeCast.js +126 -0
  546. package/lib/openzeppelin-contracts/scripts/generate/templates/StorageSlot.js +78 -0
  547. package/lib/openzeppelin-contracts/scripts/generate/templates/conversion.js +30 -0
  548. package/lib/openzeppelin-contracts/scripts/git-user-config.sh +6 -0
  549. package/lib/openzeppelin-contracts/scripts/helpers.js +37 -0
  550. package/lib/openzeppelin-contracts/scripts/prepack.sh +23 -0
  551. package/lib/openzeppelin-contracts/scripts/prepare-docs.sh +26 -0
  552. package/lib/openzeppelin-contracts/scripts/release/format-changelog.js +33 -0
  553. package/lib/openzeppelin-contracts/scripts/release/synchronize-versions.js +15 -0
  554. package/lib/openzeppelin-contracts/scripts/release/update-comment.js +34 -0
  555. package/lib/openzeppelin-contracts/scripts/release/version.sh +11 -0
  556. package/lib/openzeppelin-contracts/scripts/release/workflow/exit-prerelease.sh +8 -0
  557. package/lib/openzeppelin-contracts/scripts/release/workflow/github-release.js +48 -0
  558. package/lib/openzeppelin-contracts/scripts/release/workflow/integrity-check.sh +20 -0
  559. package/lib/openzeppelin-contracts/scripts/release/workflow/pack.sh +26 -0
  560. package/lib/openzeppelin-contracts/scripts/release/workflow/publish.sh +26 -0
  561. package/lib/openzeppelin-contracts/scripts/release/workflow/rerun.js +7 -0
  562. package/lib/openzeppelin-contracts/scripts/release/workflow/set-changesets-pr-title.js +17 -0
  563. package/lib/openzeppelin-contracts/scripts/release/workflow/start.sh +35 -0
  564. package/lib/openzeppelin-contracts/scripts/release/workflow/state.js +112 -0
  565. package/lib/openzeppelin-contracts/scripts/remove-ignored-artifacts.js +45 -0
  566. package/lib/openzeppelin-contracts/scripts/solhint-custom/index.js +84 -0
  567. package/lib/openzeppelin-contracts/scripts/solhint-custom/package.json +5 -0
  568. package/lib/openzeppelin-contracts/scripts/update-docs-branch.js +65 -0
  569. package/lib/openzeppelin-contracts/scripts/upgradeable/README.md +21 -0
  570. package/lib/openzeppelin-contracts/scripts/upgradeable/patch-apply.sh +19 -0
  571. package/lib/openzeppelin-contracts/scripts/upgradeable/patch-save.sh +18 -0
  572. package/lib/openzeppelin-contracts/scripts/upgradeable/transpile-onto.sh +54 -0
  573. package/lib/openzeppelin-contracts/scripts/upgradeable/transpile.sh +47 -0
  574. package/lib/openzeppelin-contracts/scripts/upgradeable/upgradeable.patch +360 -0
  575. package/lib/openzeppelin-contracts/slither.config.json +5 -0
  576. package/lib/openzeppelin-contracts/solhint.config.js +20 -0
  577. package/mythril-lft-output.txt +1 -0
  578. package/mythril-lft-symbolic.txt +18 -0
  579. package/mythril-lft.sh +20 -0
  580. package/mythril-symbolic-output.txt +1 -0
  581. package/mythril-symbolic.sh +42 -0
  582. package/out/build-info/0026b78428192979.json +1 -0
  583. package/out/build-info/03c4fc3b88486eba.json +1 -0
  584. package/out/build-info/0540afa9b9a5c5a6.json +1 -0
  585. package/out/build-info/081932f505bc08b9.json +1 -0
  586. package/out/build-info/0da104ba0d6642d5.json +1 -0
  587. package/out/build-info/197281971dbb5f23.json +1 -0
  588. package/out/build-info/197e7e332832a232.json +1 -0
  589. package/out/build-info/1a1cab9136eb5f94.json +1 -0
  590. package/out/build-info/1b320204eb162aa2.json +1 -0
  591. package/out/build-info/1e03f94398052674.json +1 -0
  592. package/out/build-info/22ac085949602937.json +1 -0
  593. package/out/build-info/234ef37453a9fa64.json +1 -0
  594. package/out/build-info/2447db7b1878fa8e.json +1 -0
  595. package/out/build-info/25568daeb484f5ff.json +1 -0
  596. package/out/build-info/27465853244c49ce.json +1 -0
  597. package/out/build-info/2c57a9e0f087453b.json +1 -0
  598. package/out/build-info/3c62ae7de8da68c4.json +1 -0
  599. package/out/build-info/3e771ae109e97bb3.json +1 -0
  600. package/out/build-info/460499bc0a3465c4.json +1 -0
  601. package/out/build-info/47ce37e50a4f115e.json +1 -0
  602. package/out/build-info/4fcce5c63cf427d6.json +1 -0
  603. package/out/build-info/4fd0a53fe63fddbb.json +1 -0
  604. package/out/build-info/50f1247db9d769cc.json +1 -0
  605. package/out/build-info/5317d0181a7a5e02.json +1 -0
  606. package/out/build-info/594df509275ceb5b.json +1 -0
  607. package/out/build-info/61983ac3f6141719.json +1 -0
  608. package/out/build-info/638c4548307122fe.json +1 -0
  609. package/out/build-info/67c2c43bdb7c0ded.json +1 -0
  610. package/out/build-info/777f42643aad37b7.json +1 -0
  611. package/out/build-info/7d7856f19e845354.json +1 -0
  612. package/out/build-info/83976260b6f71e94.json +1 -0
  613. package/out/build-info/83c23882000b963d.json +1 -0
  614. package/out/build-info/84b2cce8f70b36be.json +1 -0
  615. package/out/build-info/8bc13d31d7c3206a.json +1 -0
  616. package/out/build-info/8e183bd4d9d8cf88.json +1 -0
  617. package/out/build-info/94bfe1e7cafa8ff5.json +1 -0
  618. package/out/build-info/99ec7d5e8d8ff360.json +1 -0
  619. package/out/build-info/9ac044b29daa7d5e.json +1 -0
  620. package/out/build-info/9b203227ff5d2e63.json +1 -0
  621. package/out/build-info/9d18c5872c4282dd.json +1 -0
  622. package/out/build-info/9f77f04f33baf9a3.json +1 -0
  623. package/out/build-info/a6e1caf974787982.json +1 -0
  624. package/out/build-info/a94b6348867a62d6.json +1 -0
  625. package/out/build-info/ad93721947a8b195.json +1 -0
  626. package/out/build-info/b42daddb5aa4b19f.json +1 -0
  627. package/out/build-info/bf13512ae899f7e8.json +1 -0
  628. package/out/build-info/c39f86c20a548c4a.json +1 -0
  629. package/out/build-info/cb12bb975a2f4e65.json +1 -0
  630. package/out/build-info/d0c6788fadc2aa60.json +1 -0
  631. package/out/build-info/d2726bf94ed5b845.json +1 -0
  632. package/out/build-info/d4eb00da50cce5cb.json +1 -0
  633. package/out/build-info/db931924a3bc8bdd.json +1 -0
  634. package/out/build-info/e1a503d49bc77401.json +1 -0
  635. package/out/build-info/efe5396f8892ce77.json +1 -0
  636. package/out/build-info/f536d90ced745969.json +1 -0
  637. package/out/build-info/fed38823c7019b82.json +1 -0
  638. package/package.json +51 -0
  639. package/page.html +5384 -0
  640. package/pancakeswap-simple-tvl.sql +15 -0
  641. package/pancakeswap-top-pools.sql +29 -0
  642. package/pancakeswap-tvl-optimized.sql +57 -0
  643. package/pancakeswap-tvl-query.sql +60 -0
  644. package/pancakeswap-underflow-hunting.sql +51 -0
  645. package/pancakeswap-vulnerability-queries.sql +200 -0
  646. package/posi_page.html +6369 -0
  647. package/posi_response.json +29 -0
  648. package/proxy_page.html +500 -0
  649. package/run_mythril_elephant.sh +18 -0
  650. package/sHEGIC-bytecode.bin +6 -0
  651. package/sHEGIC-mythril-analysis.txt +1 -0
  652. package/sHEGIC-mythril-full.txt +134 -0
  653. package/sHEGIC_ANALYSIS.md +135 -0
  654. package/sHEGIC_EXPLOIT_ANALYSIS.md +317 -0
  655. package/sHEGIC_MYTHRIL_ANALYSIS.md +361 -0
  656. package/scrape-snowcrash.js +28 -0
  657. package/scripts/yooshi_drain.sh +154 -0
  658. package/shi_raw.json +1 -0
  659. package/temp.json +1 -0
  660. package/temp_harvest.json +1 -0
  661. package/temp_pika.json +1 -0
  662. package/temp_posi.json +1 -0
  663. package/temp_response.json +1 -0
  664. package/test-lft-hidden-balance.js +108 -0
  665. package/test-xfi-exploit.js +140 -0
  666. package/trunk-liquidity-rescue.js +164 -0
  667. package/vBABY_page.html +6153 -0
  668. package/vBABY_response.json +29 -0
  669. package/wsg_response.json +1 -0
  670. package/yooldo_page.html +10371 -0
@@ -0,0 +1,360 @@
1
+ diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md
2
+ deleted file mode 100644
3
+ index 2797a0889..000000000
4
+ --- a/.github/ISSUE_TEMPLATE/bug_report.md
5
+ +++ /dev/null
6
+ @@ -1,21 +0,0 @@
7
+ ----
8
+ -name: Bug report
9
+ -about: Report a bug in OpenZeppelin Contracts
10
+ -
11
+ ----
12
+ -
13
+ -<!-- Briefly describe the issue you're experiencing. Tell us what you were trying to do and what happened instead. -->
14
+ -
15
+ -<!-- Remember, this is not a place to ask for help debugging code. For that, we welcome you in the OpenZeppelin Community Forum: https://forum.openzeppelin.com/. -->
16
+ -
17
+ -**💻 Environment**
18
+ -
19
+ -<!-- Tell us what version of OpenZeppelin Contracts you're using, and how you're using it: Truffle, Remix, etc. -->
20
+ -
21
+ -**📝 Details**
22
+ -
23
+ -<!-- Describe the problem you have been experiencing in more detail. Include as much information as you think is relevant. Keep in mind that transactions can fail for many reasons; context is key here. -->
24
+ -
25
+ -**🔢 Code to reproduce bug**
26
+ -
27
+ -<!-- We will be able to better help if you provide a minimal example that triggers the bug. -->
28
+ diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
29
+ index 4018cef29..d343a53d8 100644
30
+ --- a/.github/ISSUE_TEMPLATE/config.yml
31
+ +++ b/.github/ISSUE_TEMPLATE/config.yml
32
+ @@ -1,4 +1,8 @@
33
+ +blank_issues_enabled: false
34
+ contact_links:
35
+ + - name: Bug Reports & Feature Requests
36
+ + url: https://github.com/OpenZeppelin/openzeppelin-contracts/issues/new/choose
37
+ + about: Visit the OpenZeppelin Contracts repository
38
+ - name: Questions & Support Requests
39
+ url: https://forum.openzeppelin.com/c/support/contracts/18
40
+ about: Ask in the OpenZeppelin Forum
41
+ diff --git a/.github/ISSUE_TEMPLATE/feature_request.md b/.github/ISSUE_TEMPLATE/feature_request.md
42
+ deleted file mode 100644
43
+ index ff596b0c3..000000000
44
+ --- a/.github/ISSUE_TEMPLATE/feature_request.md
45
+ +++ /dev/null
46
+ @@ -1,14 +0,0 @@
47
+ ----
48
+ -name: Feature request
49
+ -about: Suggest an idea for OpenZeppelin Contracts
50
+ -
51
+ ----
52
+ -
53
+ -**🧐 Motivation**
54
+ -<!-- Is your feature request related to a specific problem? Is it just a crazy idea? Tell us about it! -->
55
+ -
56
+ -**📝 Details**
57
+ -<!-- Please describe your feature request in detail. -->
58
+ -
59
+ -<!-- Make sure that you have reviewed the OpenZeppelin Contracts Contributor Guidelines. -->
60
+ -<!-- https://github.com/OpenZeppelin/openzeppelin-contracts/blob/master/CONTRIBUTING.md -->
61
+ diff --git a/README.md b/README.md
62
+ index 549891e3f..a6b24078e 100644
63
+ --- a/README.md
64
+ +++ b/README.md
65
+ @@ -23,6 +23,9 @@
66
+ > [!IMPORTANT]
67
+ > OpenZeppelin Contracts uses semantic versioning to communicate backwards compatibility of its API and storage layout. For upgradeable contracts, the storage layout of different major versions should be assumed incompatible, for example, it is unsafe to upgrade from 4.9.3 to 5.0.0. Learn more at [Backwards Compatibility](https://docs.openzeppelin.com/contracts/backwards-compatibility).
68
+
69
+ ++> [!NOTE]
70
+ ++> You are looking at the upgradeable variant of OpenZeppelin Contracts. Be sure to review the documentation on [Using OpenZeppelin Contracts with Upgrades](https://docs.openzeppelin.com/contracts/upgradeable).
71
+ ++
72
+ ## Overview
73
+
74
+ ### Installation
75
+ @@ -30,7 +33,7 @@
76
+ #### Hardhat, Truffle (npm)
77
+
78
+ ```
79
+ -$ npm install @openzeppelin/contracts
80
+ +$ npm install @openzeppelin/contracts-upgradeable
81
+ ```
82
+
83
+ #### Foundry (git)
84
+ @@ -42,10 +45,10 @@ $ npm install @openzeppelin/contracts
85
+ > Foundry installs the latest version initially, but subsequent `forge update` commands will use the `master` branch.
86
+
87
+ ```
88
+ -$ forge install OpenZeppelin/openzeppelin-contracts
89
+ +$ forge install OpenZeppelin/openzeppelin-contracts-upgradeable
90
+ ```
91
+
92
+ -Add `@openzeppelin/contracts/=lib/openzeppelin-contracts/contracts/` in `remappings.txt.`
93
+ +Add `@openzeppelin/contracts-upgradeable/=lib/openzeppelin-contracts-upgradeable/contracts/` in `remappings.txt.`
94
+
95
+ ### Usage
96
+
97
+ @@ -54,10 +57,11 @@ Once installed, you can use the contracts in the library by importing them:
98
+ ```solidity
99
+ pragma solidity ^0.8.20;
100
+
101
+ -import {ERC721} from "@openzeppelin/contracts/token/ERC721/ERC721.sol";
102
+ +import {ERC721Upgradeable} from "@openzeppelin/contracts-upgradeable/token/ERC721/ERC721Upgradeable.sol";
103
+
104
+ -contract MyCollectible is ERC721 {
105
+ - constructor() ERC721("MyCollectible", "MCO") {
106
+ +contract MyCollectible is ERC721Upgradeable {
107
+ + function initialize() initializer public {
108
+ + __ERC721_init("MyCollectible", "MCO");
109
+ }
110
+ }
111
+ ```
112
+ diff --git a/contracts/package.json b/contracts/package.json
113
+ index 9017953ca..f51c1d38b 100644
114
+ --- a/contracts/package.json
115
+ +++ b/contracts/package.json
116
+ @@ -1,5 +1,5 @@
117
+ {
118
+ - "name": "@openzeppelin/contracts",
119
+ + "name": "@openzeppelin/contracts-upgradeable",
120
+ "description": "Secure Smart Contract library for Solidity",
121
+ "version": "4.9.2",
122
+ "files": [
123
+ @@ -13,7 +13,7 @@
124
+ },
125
+ "repository": {
126
+ "type": "git",
127
+ - "url": "https://github.com/OpenZeppelin/openzeppelin-contracts.git"
128
+ + "url": "https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable.git"
129
+ },
130
+ "keywords": [
131
+ "solidity",
132
+ @@ -28,5 +28,8 @@
133
+ "bugs": {
134
+ "url": "https://github.com/OpenZeppelin/openzeppelin-contracts/issues"
135
+ },
136
+ - "homepage": "https://openzeppelin.com/contracts/"
137
+ + "homepage": "https://openzeppelin.com/contracts/",
138
+ + "peerDependencies": {
139
+ + "@openzeppelin/contracts": "<package-version>"
140
+ + }
141
+ }
142
+ diff --git a/contracts/utils/cryptography/EIP712.sol b/contracts/utils/cryptography/EIP712.sol
143
+ index 644f6f531..ab8ba05ff 100644
144
+ --- a/contracts/utils/cryptography/EIP712.sol
145
+ +++ b/contracts/utils/cryptography/EIP712.sol
146
+ @@ -4,7 +4,6 @@
147
+ pragma solidity ^0.8.20;
148
+
149
+ import {MessageHashUtils} from "./MessageHashUtils.sol";
150
+ -import {ShortStrings, ShortString} from "../ShortStrings.sol";
151
+ import {IERC5267} from "../../interfaces/IERC5267.sol";
152
+
153
+ /**
154
+ @@ -28,28 +27,18 @@ import {IERC5267} from "../../interfaces/IERC5267.sol";
155
+ * NOTE: In the upgradeable version of this contract, the cached values will correspond to the address, and the domain
156
+ * separator of the implementation contract. This will cause the {_domainSeparatorV4} function to always rebuild the
157
+ * separator from the immutable values, which is cheaper than accessing a cached version in cold storage.
158
+ - *
159
+ - * @custom:oz-upgrades-unsafe-allow state-variable-immutable
160
+ */
161
+ abstract contract EIP712 is IERC5267 {
162
+ - using ShortStrings for *;
163
+ -
164
+ bytes32 private constant TYPE_HASH =
165
+ keccak256("EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)");
166
+
167
+ - // Cache the domain separator as an immutable value, but also store the chain id that it corresponds to, in order to
168
+ - // invalidate the cached domain separator if the chain id changes.
169
+ - bytes32 private immutable _cachedDomainSeparator;
170
+ - uint256 private immutable _cachedChainId;
171
+ - address private immutable _cachedThis;
172
+ -
173
+ + /// @custom:oz-renamed-from _HASHED_NAME
174
+ bytes32 private immutable _hashedName;
175
+ + /// @custom:oz-renamed-from _HASHED_VERSION
176
+ bytes32 private immutable _hashedVersion;
177
+
178
+ - ShortString private immutable _name;
179
+ - ShortString private immutable _version;
180
+ - string private _nameFallback;
181
+ - string private _versionFallback;
182
+ + string private _name;
183
+ + string private _version;
184
+
185
+ /**
186
+ * @dev Initializes the domain separator and parameter caches.
187
+ @@ -64,29 +53,23 @@ abstract contract EIP712 is IERC5267 {
188
+ * contract upgrade].
189
+ */
190
+ constructor(string memory name, string memory version) {
191
+ - _name = name.toShortStringWithFallback(_nameFallback);
192
+ - _version = version.toShortStringWithFallback(_versionFallback);
193
+ - _hashedName = keccak256(bytes(name));
194
+ - _hashedVersion = keccak256(bytes(version));
195
+ -
196
+ - _cachedChainId = block.chainid;
197
+ - _cachedDomainSeparator = _buildDomainSeparator();
198
+ - _cachedThis = address(this);
199
+ + _name = name;
200
+ + _version = version;
201
+ +
202
+ + // Reset prior values in storage if upgrading
203
+ + _hashedName = 0;
204
+ + _hashedVersion = 0;
205
+ }
206
+
207
+ /**
208
+ * @dev Returns the domain separator for the current chain.
209
+ */
210
+ function _domainSeparatorV4() internal view returns (bytes32) {
211
+ - if (address(this) == _cachedThis && block.chainid == _cachedChainId) {
212
+ - return _cachedDomainSeparator;
213
+ - } else {
214
+ - return _buildDomainSeparator();
215
+ - }
216
+ + return _buildDomainSeparator();
217
+ }
218
+
219
+ function _buildDomainSeparator() private view returns (bytes32) {
220
+ - return keccak256(abi.encode(TYPE_HASH, _hashedName, _hashedVersion, block.chainid, address(this)));
221
+ + return keccak256(abi.encode(TYPE_HASH, _EIP712NameHash(), _EIP712VersionHash(), block.chainid, address(this)));
222
+ }
223
+
224
+ /**
225
+ @@ -125,6 +108,10 @@ abstract contract EIP712 is IERC5267 {
226
+ uint256[] memory extensions
227
+ )
228
+ {
229
+ + // If the hashed name and version in storage are non-zero, the contract hasn't been properly initialized
230
+ + // and the EIP712 domain is not reliable, as it will be missing name and version.
231
+ + require(_hashedName == 0 && _hashedVersion == 0, "EIP712: Uninitialized");
232
+ +
233
+ return (
234
+ hex"0f", // 01111
235
+ _EIP712Name(),
236
+ @@ -139,22 +126,62 @@ abstract contract EIP712 is IERC5267 {
237
+ /**
238
+ * @dev The name parameter for the EIP712 domain.
239
+ *
240
+ - * NOTE: By default this function reads _name which is an immutable value.
241
+ - * It only reads from storage if necessary (in case the value is too large to fit in a ShortString).
242
+ + * NOTE: This function reads from storage by default, but can be redefined to return a constant value if gas costs
243
+ + * are a concern.
244
+ */
245
+ - // solhint-disable-next-line func-name-mixedcase
246
+ - function _EIP712Name() internal view returns (string memory) {
247
+ - return _name.toStringWithFallback(_nameFallback);
248
+ + function _EIP712Name() internal view virtual returns (string memory) {
249
+ + return _name;
250
+ }
251
+
252
+ /**
253
+ * @dev The version parameter for the EIP712 domain.
254
+ *
255
+ - * NOTE: By default this function reads _version which is an immutable value.
256
+ - * It only reads from storage if necessary (in case the value is too large to fit in a ShortString).
257
+ + * NOTE: This function reads from storage by default, but can be redefined to return a constant value if gas costs
258
+ + * are a concern.
259
+ */
260
+ - // solhint-disable-next-line func-name-mixedcase
261
+ - function _EIP712Version() internal view returns (string memory) {
262
+ - return _version.toStringWithFallback(_versionFallback);
263
+ + function _EIP712Version() internal view virtual returns (string memory) {
264
+ + return _version;
265
+ + }
266
+ +
267
+ + /**
268
+ + * @dev The hash of the name parameter for the EIP712 domain.
269
+ + *
270
+ + * NOTE: In previous versions this function was virtual. In this version you should override `_EIP712Name` instead.
271
+ + */
272
+ + function _EIP712NameHash() internal view returns (bytes32) {
273
+ + string memory name = _EIP712Name();
274
+ + if (bytes(name).length > 0) {
275
+ + return keccak256(bytes(name));
276
+ + } else {
277
+ + // If the name is empty, the contract may have been upgraded without initializing the new storage.
278
+ + // We return the name hash in storage if non-zero, otherwise we assume the name is empty by design.
279
+ + bytes32 hashedName = _hashedName;
280
+ + if (hashedName != 0) {
281
+ + return hashedName;
282
+ + } else {
283
+ + return keccak256("");
284
+ + }
285
+ + }
286
+ + }
287
+ +
288
+ + /**
289
+ + * @dev The hash of the version parameter for the EIP712 domain.
290
+ + *
291
+ + * NOTE: In previous versions this function was virtual. In this version you should override `_EIP712Version` instead.
292
+ + */
293
+ + function _EIP712VersionHash() internal view returns (bytes32) {
294
+ + string memory version = _EIP712Version();
295
+ + if (bytes(version).length > 0) {
296
+ + return keccak256(bytes(version));
297
+ + } else {
298
+ + // If the version is empty, the contract may have been upgraded without initializing the new storage.
299
+ + // We return the version hash in storage if non-zero, otherwise we assume the version is empty by design.
300
+ + bytes32 hashedVersion = _hashedVersion;
301
+ + if (hashedVersion != 0) {
302
+ + return hashedVersion;
303
+ + } else {
304
+ + return keccak256("");
305
+ + }
306
+ + }
307
+ }
308
+ }
309
+ diff --git a/package.json b/package.json
310
+ index 3a1617c09..97e59c2d9 100644
311
+ --- a/package.json
312
+ +++ b/package.json
313
+ @@ -32,7 +32,7 @@
314
+ },
315
+ "repository": {
316
+ "type": "git",
317
+ - "url": "https://github.com/OpenZeppelin/openzeppelin-contracts.git"
318
+ + "url": "https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable.git"
319
+ },
320
+ "keywords": [
321
+ "solidity",
322
+ diff --git a/remappings.txt b/remappings.txt
323
+ index 304d1386a..a1cd63bee 100644
324
+ --- a/remappings.txt
325
+ +++ b/remappings.txt
326
+ @@ -1 +1,2 @@
327
+ -@openzeppelin/contracts/=contracts/
328
+ +@openzeppelin/contracts-upgradeable/=contracts/
329
+ +@openzeppelin/contracts/=lib/openzeppelin-contracts/contracts/
330
+ diff --git a/test/utils/cryptography/EIP712.test.js b/test/utils/cryptography/EIP712.test.js
331
+ index faf01f1a3..b25171a56 100644
332
+ --- a/test/utils/cryptography/EIP712.test.js
333
+ +++ b/test/utils/cryptography/EIP712.test.js
334
+ @@ -47,26 +47,6 @@ contract('EIP712', function (accounts) {
335
+ const rebuildDomain = await getDomain(this.eip712);
336
+ expect(mapValues(rebuildDomain, String)).to.be.deep.equal(mapValues(this.domain, String));
337
+ });
338
+ -
339
+ - if (shortOrLong === 'short') {
340
+ - // Long strings are in storage, and the proxy will not be properly initialized unless
341
+ - // the upgradeable contract variant is used and the initializer is invoked.
342
+ -
343
+ - it('adjusts when behind proxy', async function () {
344
+ - const factory = await Clones.new();
345
+ - const cloneReceipt = await factory.$clone(this.eip712.address);
346
+ - const cloneAddress = cloneReceipt.logs.find(({ event }) => event === 'return$clone').args.instance;
347
+ - const clone = new EIP712Verifier(cloneAddress);
348
+ -
349
+ - const cloneDomain = { ...this.domain, verifyingContract: clone.address };
350
+ -
351
+ - const reportedDomain = await getDomain(clone);
352
+ - expect(mapValues(reportedDomain, String)).to.be.deep.equal(mapValues(cloneDomain, String));
353
+ -
354
+ - const expectedSeparator = await domainSeparator(cloneDomain);
355
+ - expect(await clone.$_domainSeparatorV4()).to.equal(expectedSeparator);
356
+ - });
357
+ - }
358
+ });
359
+
360
+ it('hash digest', async function () {
@@ -0,0 +1,5 @@
1
+ {
2
+ "detectors_to_run": "arbitrary-send-erc20,array-by-reference,incorrect-shift,name-reused,rtlo,suicidal,uninitialized-state,uninitialized-storage,arbitrary-send-erc20-permit,controlled-array-length,controlled-delegatecall,delegatecall-loop,msg-value-loop,reentrancy-eth,unchecked-transfer,weak-prng,domain-separator-collision,erc20-interface,erc721-interface,locked-ether,mapping-deletion,shadowing-abstract,tautology,write-after-write,boolean-cst,reentrancy-no-eth,reused-constructor,tx-origin,unchecked-lowlevel,unchecked-send,variable-scope,void-cst,events-access,events-maths,incorrect-unary,boolean-equal,cyclomatic-complexity,deprecated-standards,erc20-indexed,function-init-state,pragma,unused-state,reentrancy-unlimited-gas,constable-states,immutable-states,var-read-using-this",
3
+ "filter_paths": "contracts/mocks,contracts-exposed",
4
+ "compile_force_framework": "hardhat"
5
+ }
@@ -0,0 +1,20 @@
1
+ const customRules = require('./scripts/solhint-custom');
2
+
3
+ const rules = [
4
+ 'no-unused-vars',
5
+ 'const-name-snakecase',
6
+ 'contract-name-camelcase',
7
+ 'event-name-camelcase',
8
+ 'func-name-mixedcase',
9
+ 'func-param-name-mixedcase',
10
+ 'modifier-name-mixedcase',
11
+ 'var-name-mixedcase',
12
+ 'imports-on-top',
13
+ 'no-global-import',
14
+ ...customRules.map(r => `openzeppelin/${r.ruleId}`),
15
+ ];
16
+
17
+ module.exports = {
18
+ plugins: ['openzeppelin'],
19
+ rules: Object.fromEntries(rules.map(r => [r, 'error'])),
20
+ };
@@ -0,0 +1 @@
1
+ mythril.interfaces.cli [ERROR]: Invalid RPC argument, use 'ganache', 'infura-[network]', or 'HOST:PORT'
@@ -0,0 +1,18 @@
1
+ mythril.interfaces.cli [ERROR]: Traceback (most recent call last):
2
+ File "/Users/rlawrence/.mythril-env/lib/python3.13/site-packages/mythril/interfaces/cli.py", line 975, in parse_args_and_execute
3
+ address = load_code(disassembler, args)
4
+ File "/Users/rlawrence/.mythril-env/lib/python3.13/site-packages/mythril/interfaces/cli.py", line 726, in load_code
5
+ address, _ = disassembler.load_from_solidity(
6
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^
7
+ args.solidity_files
8
+ ^^^^^^^^^^^^^^^^^^^
9
+ ) # list of files
10
+ ^
11
+ File "/Users/rlawrence/.mythril-env/lib/python3.13/site-packages/mythril/mythril/mythril_disassembler.py", line 277, in load_from_solidity
12
+ solc_binary, self.solc_version = util.extract_binary(file)
13
+ ~~~~~~~~~~~~~~~~~~~^^^^^^
14
+ File "/Users/rlawrence/.mythril-env/lib/python3.13/site-packages/mythril/ethereum/util.py", line 222, in extract_binary
15
+ with open(file) as f:
16
+ ~~~~^^^^^^
17
+ OSError: [Errno 63] File name too long: '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'
18
+
package/mythril-lft.sh ADDED
@@ -0,0 +1,20 @@
1
+ #!/bin/bash
2
+
3
+ # Mythril analysis of LendFlare Token
4
+ # Address: 0xB620Be8a1949AA9532e6a3510132864EF9Bc3F82
5
+
6
+ echo "=== MYTHRIL ANALYSIS: LENDFLARE TOKEN ==="
7
+ echo "Address: 0xB620Be8a1949AA9532e6a3510132864EF9Bc3F82"
8
+ echo ""
9
+
10
+ # Try to analyze from address (requires RPC)
11
+ echo "Attempting to analyze from mainnet..."
12
+ myth analyze -a 0xB620Be8a1949AA9532e6a3510132864EF9Bc3F82 \
13
+ --rpc https://mainnet.infura.io/v3/db4d2c885bc946b691dbb3d5ef26d9e2 \
14
+ --execution-timeout 300 \
15
+ --max-depth 12 \
16
+ --solver-timeout 10000 \
17
+ 2>&1 | tee mythril-lft-output.txt
18
+
19
+ echo ""
20
+ echo "=== ANALYSIS COMPLETE ==="
@@ -0,0 +1 @@
1
+ mythril.interfaces.cli [ERROR]: Invalid network mainnet:db4d2c885bc946b691dbb3d5ef26d9e2, use 'mainnet', 'rinkeby', 'kovan', 'ropsten', 'goerli', 'avalanche', 'arbitrum', 'optimism', or 'polygon'
@@ -0,0 +1,42 @@
1
+ #!/bin/bash
2
+
3
+ echo "=== MYTHRIL SYMBOLIC EXECUTION: LENDFLARE TOKEN ==="
4
+ echo "Address: 0xB620Be8a1949AA9532e6a3510132864EF9Bc3F82"
5
+ echo ""
6
+
7
+ # Method 1: Analyze bytecode directly from Etherscan
8
+ echo "Method 1: Fetching bytecode from Etherscan..."
9
+ curl -s "https://api.etherscan.io/api?module=proxy&action=eth_getCode&address=0xB620Be8a1949AA9532e6a3510132864EF9Bc3F82&apikey=YourApiKeyToken" > lft-bytecode.json
10
+
11
+ # Extract bytecode
12
+ BYTECODE=$(cat lft-bytecode.json | grep -o '"result":"0x[^"]*"' | cut -d'"' -f4)
13
+
14
+ if [ ! -z "$BYTECODE" ] && [ "$BYTECODE" != "0x" ]; then
15
+ echo "Bytecode fetched: ${#BYTECODE} bytes"
16
+ echo "$BYTECODE" > lft-bytecode.txt
17
+
18
+ # Method 2: Analyze bytecode with Mythril
19
+ echo ""
20
+ echo "Method 2: Running Mythril on bytecode..."
21
+ myth analyze --bin-runtime "$BYTECODE" \
22
+ --execution-timeout 300 \
23
+ --max-depth 22 \
24
+ --solver-timeout 100000 \
25
+ --strategy bfs \
26
+ --verbose-report \
27
+ 2>&1 | tee mythril-symbolic-output.txt
28
+ else
29
+ echo "Failed to fetch bytecode"
30
+ fi
31
+
32
+ echo ""
33
+ echo "Method 3: Trying with infura RPC..."
34
+ myth analyze -a 0xB620Be8a1949AA9532e6a3510132864EF9Bc3F82 \
35
+ --rpc infura-mainnet:db4d2c885bc946b691dbb3d5ef26d9e2 \
36
+ --execution-timeout 300 \
37
+ --max-depth 22 \
38
+ --solver-timeout 100000 \
39
+ 2>&1 | tee -a mythril-symbolic-output.txt
40
+
41
+ echo ""
42
+ echo "=== SYMBOLIC EXECUTION COMPLETE ==="
@@ -0,0 +1 @@
1
+ {"id":"0026b78428192979","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/XFISimpleExploit.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"03c4fc3b88486eba","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/YOOSHI_MathProof.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"0540afa9b9a5c5a6","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/ARIAFuzz.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"081932f505bc08b9","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/BSW_SilentMint_POC.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"0da104ba0d6642d5","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/YOOSHI_CheckHistoricalState.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"197281971dbb5f23","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/BabyPoolV2_FlashLoan_Exploit.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"197e7e332832a232","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/NetX_Final_Analysis.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"1a1cab9136eb5f94","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/CheckUserNFT.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"1b320204eb162aa2","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/NetX_Migration_Exploit.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"1e03f94398052674","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/CheckNFTWeight.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"22ac085949602937","source_id_to_path":{"0":"KEL_CEL_Siphoner.sol","1":"lib/forge-std/src/Base.sol","2":"lib/forge-std/src/StdAssertions.sol","3":"lib/forge-std/src/StdChains.sol","4":"lib/forge-std/src/StdCheats.sol","5":"lib/forge-std/src/StdConstants.sol","6":"lib/forge-std/src/StdError.sol","7":"lib/forge-std/src/StdInvariant.sol","8":"lib/forge-std/src/StdJson.sol","9":"lib/forge-std/src/StdMath.sol","10":"lib/forge-std/src/StdStorage.sol","11":"lib/forge-std/src/StdStyle.sol","12":"lib/forge-std/src/StdToml.sol","13":"lib/forge-std/src/StdUtils.sol","14":"lib/forge-std/src/Test.sol","15":"lib/forge-std/src/Vm.sol","16":"lib/forge-std/src/console.sol","17":"lib/forge-std/src/console2.sol","18":"lib/forge-std/src/interfaces/IMulticall3.sol","19":"lib/forge-std/src/safeconsole.sol","20":"test/KEL_CEL_SiphonerTest.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"234ef37453a9fa64","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/YOOSHI_CheckState.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"2447db7b1878fa8e","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/HotCrossSwapFuzz.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"25568daeb484f5ff","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/XFIUnderflowTest.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"27465853244c49ce","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/CheckNFT2725.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"2c57a9e0f087453b","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/YOOSHI_Exploit.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"3c62ae7de8da68c4","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/YOOSHI_FindStakeMethod.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"3e771ae109e97bb3","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/XFIWorkingExploit.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"460499bc0a3465c4","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/XFIFlashLoanExploit.t.sol"},"language":"Solidity"}
@@ -0,0 +1 @@
1
+ {"id":"47ce37e50a4f115e","source_id_to_path":{"0":"lib/forge-std/src/Base.sol","1":"lib/forge-std/src/StdAssertions.sol","2":"lib/forge-std/src/StdChains.sol","3":"lib/forge-std/src/StdCheats.sol","4":"lib/forge-std/src/StdConstants.sol","5":"lib/forge-std/src/StdError.sol","6":"lib/forge-std/src/StdInvariant.sol","7":"lib/forge-std/src/StdJson.sol","8":"lib/forge-std/src/StdMath.sol","9":"lib/forge-std/src/StdStorage.sol","10":"lib/forge-std/src/StdStyle.sol","11":"lib/forge-std/src/StdToml.sol","12":"lib/forge-std/src/StdUtils.sol","13":"lib/forge-std/src/Test.sol","14":"lib/forge-std/src/Vm.sol","15":"lib/forge-std/src/console.sol","16":"lib/forge-std/src/console2.sol","17":"lib/forge-std/src/interfaces/IMulticall3.sol","18":"lib/forge-std/src/safeconsole.sol","19":"test/BabyPoolV2_Underflow_Attack.t.sol"},"language":"Solidity"}