Skip to content

Instantly share code, notes, and snippets.

@Joshua-Medvinsky
Joshua-Medvinsky / AlchemistV3Harness.sol
Created October 19, 2025 09:05
OPS-H009 POC: Repay Griefing Attack in Alchemix V3
// SPDX-License-Identifier: GPL-3.0-or-later
pragma solidity =0.8.28;
/// @title AlchemistV3Harness
/// @notice Vulnerable code extracted from AlchemistV3.sol for OPS-H009 POC
/// @dev Repay griefing: expensive operations before collateral check enables DoS
contract AlchemistV3Harness {
uint256 public constant BPS = 10000;
uint256 public constant FIXED_POINT_SCALAR = 1e18;
@Joshua-Medvinsky
Joshua-Medvinsky / AlchemistV3Harness.sol
Created October 19, 2025 08:58
ECON-H001 POC: TVL Manipulation via Missing _mytSharesDeposited Decrement in Alchemix V3
// SPDX-License-Identifier: GPL-3.0-or-later
pragma solidity =0.8.28;
/// @title AlchemistV3Harness
/// @notice Vulnerable code extracted from AlchemistV3.sol for ECON-H001 POC
/// @dev Missing _mytSharesDeposited decrement in liquidations causes TVL inflation
contract AlchemistV3Harness {
uint256 public constant FIXED_POINT_SCALAR = 1e18;
@Joshua-Medvinsky
Joshua-Medvinsky / AlchemistV3Harness.sol
Created October 19, 2025 08:49
ECON-C001 POC: Zero-Cost Fee Farming Attack in Alchemix V3
// SPDX-License-Identifier: GPL-3.0-or-later
pragma solidity =0.8.28;
/// @title AlchemistV3Harness
/// @notice Vulnerable code extracted from AlchemistV3.sol for ECON-C001 POC
/// @dev Contains the exact vulnerable liquidation logic (lines 548-889 from AlchemistV3.sol)
contract AlchemistV3Harness {
uint256 public constant BPS = 10_000;
uint256 public constant FIXED_POINT_SCALAR = 1e18;