defi-exploit-pipeline

## https://sploitus.com/exploit?id=1E6E1A5B-217E-5BA0-A4DA-85AB7D09A63D
# DeFi Exploit Pipeline

Pipeline otomatis untuk menganalisis smart contract DeFi berdasarkan 701 exploit historis dari DeFiHackLabs.

## Cara Pakai

```bash
# Match target against exploit database
python3 pipeline.py 

# Deep scan + full analysis
python3 pipeline.py --scan 

# Re-extract database dari DeFiHackLabs
python3 pipeline.py --extract

# Top N matches
python3 pipeline.py  --top 20
```

## Pipeline Flow

```
1. EXTRACT    → Parse 701 .sol exploit files → JSON database
2. MATCH      → Compare target against exploit patterns
3. DEEP SCAN  → Extract attack surface features dari target
4. REPORT     → Generate markdown report dengan findings
```

## Files

```
defi-exploit-pipeline/
├── pipeline.py              # Main entry point
├── scripts/
│   ├── extract_db.py        # Extract metadata dari 701 exploit files
│   ├── extract_logic.py     # Extract call logic dan code signatures
│   └── match_pattern.py     # Match target against exploit patterns
├── data/
│   ├── exploit_database.json    # 701 exploit metadata (896KB)
│   ├── exploit_logic_db.json    # 701 exploit logic (402KB)
│   ├── EXPLOIT_DATABASE.md      # Readable exploit index
│   └── PATTERN_REFERENCE.md     # Pattern signatures reference
└── output/
    └── _report.md   # Generated reports
```

## Database Stats

- **701 exploit files** parsed
- **121 unique attack patterns**
- **15 vulnerability types** categorized
- **10 chains** covered (ETH, BSC, Arbitrum, Polygon, dll)

## Vulnerability Types

| Type | Count | Description |
|------|-------|-------------|
| flash_loan | 375 | Flash loan abuse |
| oracle_manipulation | 241 | Price oracle manipulation |
| reentrancy | 105 | Reentrancy attacks |
| approval_abuse | 412 | Token approval issues |
| dex_manipulation | 74 | DEX pool manipulation |
| signature_abuse | 114 | Signature/permit abuse |
| access_control | 57 | Missing access control |
| logic_error | 71 | Logic/math errors |

## Contoh Output

```
🔍 Analyzing: Morpho.sol
📝 Signature: FLASH_LOAN → ORACLE → CALLBACK

🎯 Top 5 matching exploit patterns:
  1. UwuLend (2024-06) — Score: 0.983 — $19.3M
  2. Agave (2022-03) — Score: 0.879 — $1.5M
  3. Euler (2023-03) — Score: 0.75 — $196M
```

## Requirements

- Python 3.10+
- DeFiHackLabs repo di `/root/DeFiHackLabs/`

## Based On

- [DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs) — 701 exploit PoC collection
- Analisis pattern dari exploit historis: UwuLend, Euler, BonqDAO, Agave, dll