morpho-critical-poc / ExploitMorpho.sol
joekaw's picture
added raw exploit script
f559664 verified
Raw
History Blame Contribute Delete
534 Bytes
// Testing oracle lag on Morpho Blue.
// If the fixed rate doesn't update, we can just arb it.
// Need to check why this vault doesn't handle the tick spread correctly.
contract ExploitMorpho {
address constant MORPHO = 0xBBBBBbbBBb9cC5e90e7b3Af60BDf0224d08b3400;
function pwn() external {
// Just messing around with the storage slots
// Found this while testing the oracle lag.
// Seems like a direct drift.
assembly {
// ... (logika exploit lu disini)
}
}
}