{"id":29193135,"url":"https://github.com/0xh4ty/sushiswap-v1-exploit-lab","last_synced_at":"2025-08-03T15:35:41.587Z","repository":{"id":302189508,"uuid":"1010965942","full_name":"0xh4ty/sushiswap-v1-exploit-lab","owner":"0xh4ty","description":"Ported SushiSwap v1 contracts to Solidity 0.8.25 for replicating PeckShield-audited vulnerabilities, writing fuzz tests, and researching exploits.","archived":false,"fork":false,"pushed_at":"2025-07-01T02:49:24.000Z","size":39,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-07-01T03:39:09.659Z","etag":null,"topics":["exploits","foundry","fuzzing","security-research","sushiswap"],"latest_commit_sha":null,"homepage":"https://0xh4ty.github.io/","language":"Solidity","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"wtfpl","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/0xh4ty.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-06-30T05:30:54.000Z","updated_at":"2025-07-01T02:49:27.000Z","dependencies_parsed_at":"2025-07-02T12:45:47.787Z","dependency_job_id":null,"html_url":"https://github.com/0xh4ty/sushiswap-v1-exploit-lab","commit_stats":null,"previous_names":["0xh4ty/sushiswap-v1-exploit-lab"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/0xh4ty/sushiswap-v1-exploit-lab","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xh4ty%2Fsushiswap-v1-exploit-lab","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xh4ty%2Fsushiswap-v1-exploit-lab/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xh4ty%2Fsushiswap-v1-exploit-lab/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xh4ty%2Fsushiswap-v1-exploit-lab/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/0xh4ty","download_url":"https://codeload.github.com/0xh4ty/sushiswap-v1-exploit-lab/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xh4ty%2Fsushiswap-v1-exploit-lab/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":268568114,"owners_count":24271445,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-03T02:00:12.545Z","response_time":2577,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["exploits","foundry","fuzzing","security-research","sushiswap"],"created_at":"2025-07-02T02:07:41.401Z","updated_at":"2025-08-03T15:35:41.534Z","avatar_url":"https://github.com/0xh4ty.png","language":"Solidity","funding_links":[],"categories":[],"sub_categories":[],"readme":"# sushiswap-v1-exploit-lab\n\nA lab environment for replicating and exploring the vulnerabilities and exploits documented in the [PeckShield audit of SushiSwap v1.0](https://github.com/peckshield/publications/blob/master/audit_reports/PeckShield-Audit-Report-SushiSwap-v1.0.pdf), as well as performing advanced fuzzing and invariant testing on its Uniswap V2-based AMM core.\n\nThis project is a port of the original SushiSwap v1 contracts (commit `180bc9b`) from [sushiswap/sushiswap](https://github.com/sushiswap/sushiswap/tree/180bc9b) to Solidity 0.8.25, enabling modern testing frameworks and security validation tools.\n\n## Overview\n\nThe lab provides a reproducible environment to:\n\n- Replicate historical vulnerabilities described in public audits\n- Validate patched code and security mitigations\n- Develop proof-of-concept (PoC) exploits\n- Perform stateful and stateless fuzz testing\n- Conduct mutation testing and differential testing against reference implementations\n\n## Structure\n\n- `src/contracts/` — ported and patched SushiSwap v1 contracts\n- `test/` — tests replicating audit findings and exploits\n- `mocks/` — supporting mock contracts for tests\n- `scripts/` — deployment or migration scripts\n\n## Contributing\n\nContributions are welcome. If you plan to add fuzz tests, PoC exploits, or new invariants, please open an issue or pull request to discuss. Follow Solidity best practices and clearly document any security-relevant findings or modifications.\n\n## Licensing\n\n- Original SushiSwap contracts: WTFPL\n- Portions derived from Uniswap V2: GPLv3\n- Your contributions: choose your license or inherit the above\n\nSee the `NOTICE` file for detailed attribution.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0xh4ty%2Fsushiswap-v1-exploit-lab","html_url":"https://awesome.ecosyste.ms/projects/github.com%2F0xh4ty%2Fsushiswap-v1-exploit-lab","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0xh4ty%2Fsushiswap-v1-exploit-lab/lists"}