whitehacks-kit

KO | EN

gitlite — search

#javascript #hacktoberfest #typescript #llm #go #android #rust #java #windows #cli #kubernetes #pytorch #security #openai

(★ 179)

A simple template to perform whitehacks safely

파일 탐색기

최종 버전 다운로드 (.zip)

- - test.yml
- forge-std
- openzeppelin-contracts
- Whitehack.s.sol
- Factory.sol
- Whitehack.sol
- Factory.t.sol
.gitignore
.gitmodules
foundry.toml
README.md
remappings.txt

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Whitehacks Kit

A simple template to perform whitehacks safely in a single tx, leveraging Foundry and Flashbots.

## Disclaimer

Provided AS-IS as educational content only, disclaim any liability for using it.

## Usage

Whitehacks are hard and should be execute by professionals. If you are unsure reach-out the [Seal 911 Bot](https://t.me/seal_911_bot). Reach-out anyway.

This repo offers a guide to prepare them.

They must be executed in 1 shot and privately, hence one single transaction and the private mempool by Flashbots.

You prepare, you test in a fork, you don't change, you execute.

## Setup

0. Fork the repo
1. [Install Foundry](https://book.getfoundry.sh/getting-started/installation)
2. Edit [Whitehack.sol](./src/Whitehack.sol)
3. Adapt [Whitehack.s.sol](./script/Whitehack.s.sol)

## Preparation

1. Unset `$ETH_RPC_URL`

```zsh
unset $ETH_RPC_URL
```

2. Check no RPC port open on your computer, if so kill the processes

```zsh
netstat -an | grep LISTEN | grep 8545
```

## Test

1. Run Anvil fork with

```zsh
anvil --fork-url https://eth.llamarpc.com
```

2. Impersonate your account `0xYOUR_WALLET_ADDRESS`

```zsh
cast rpc \
    anvil_impersonateAccount "0xYOUR_WALLET_ADDRESS" \
    --rpc-url "http://localhost:8545"
```

3. Run the script

```zsh
forge script \
  script/Whitehack.s.sol:WhitehackScript \
  --rpc-url "http://localhost:8545" \
  --sender "0xYOUR_WALLET_ADDRESS" \
  -vvv \
  --broadcast
```

## Run

Do not change your script and contract after the test

```zsh
forge script \
  script/Whitehack.s.sol:WhitehackScript \
  --rpc-url "https://rpc.flashbots.net?hint=hash" \
  --sender "0xYOUR_WALLET_ADDRESS" \
  --interactives 1 \
  -vvv \
  --broadcast
```

The rpc url is set for [Full Privacy](https://docs.flashbots.net/flashbots-protect/rpc/mev-share#full-privacy) on Flashbots

## Examples

- [Curve 30/07/23](https://github.com/emilianobonassi/curve-whitehack-example)

whitehacks-kit

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

whitehacks-kit

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README