exploit1

poc

[MEV contract] 0xee85d50607ed2d1413eabf789eca6f138a9c362f
为可升级合约，实现地址为：0x037f09d32E1e3AC52a295aE856C17C42d7DEFE83
调用了另一个0x83EF20c2eA6BEd52a62b34BfB3f559DDE4441E65合约

decompiler

decompiler

msg.sender: 0xa1d2b3c7c64b2746370cd8f6e81af7d4cb3fbb1c

input:
0xb11ad16900000000000000000000000000000000000000000000000000000000000000600000000000000000000000001610bc33319e9398de5f57b33a5b184c806ad21700000000000000000000000000000000000000000000000045963237b717b40000000000000000000000000000000000000000000000000000000000000000010000000000000000000000009abfe8921d32eac9fea6669e25344e2c97182757

0xb11ad169
0000000000000000000000000000000000000000000000000000000000000060 address[], borrowers
0000000000000000000000001610bc33319e9398de5f57b33a5b184c806ad217 # vDot
00000000000000000000000000000000000000000000000045963237b717b400 # dot price
0000000000000000000000000000000000000000000000000000000000000001 # borrowers.length
0000000000000000000000009abfe8921d32eac9fea6669e25344e2c97182757 # borrower

borrower: 0x9abfe8921d32eac9fea6669e25344e2c97182757
vDot: 0x1610bc33319e9398de5f57b33a5b184c806ad217 不再使用

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
// SPDX-License-Identifier: MIT
pragma solidity ^0.8.0;
getAssetsIn
getAccountSnapshot*
getUnderlyingPrice*
mintedVAIs
underlying
liquidateCalculateSeizeTokens
exchangeRateStored
liquidationIncentiveMantissa
pcs.getAmountsOut
mdex.getAmountsOut
swap
pancakeCall
approve
liquidateBorrow
transfer

trace