Differential fuzz testing upgradeable smart contracts with Diffusc

By William E Bodell III (@WEBthe3rd)

On March 28, 2023, SafeMoon, a self-styled “community-focused DeFi token” on Binance Smart Chain, lost the equivalent of $8.9 million in Binance Coin BNB to an exploit in a liquidity pool. The exploit leveraged a simple error introduced in an upgrade to SafeMoon’s SFM token contract, allowing the attacker to burn tokens held in the liquidity pool and artificially inflate their price before selling enough previously acquired tokens to completely drain the pool of …

binance binance coin bnb community contract contracts defi error exploit fuzz fuzz testing iii liquidity lost march safemoon simple smart smart contracts testing token upgrade