Beanstalk Farms 攻击分析

提案交易:
https://etherscan.io/tx/0x68cdec0ac76454c3b0f7af0b8a3895db00adf6daaf3b50a99716858c4fa54c6f
攻击交易:
https://etherscan.io/tx/0xcd314668aaa9bbfebaf1a0bd2b6553d01dd58899c508d4729fa7311dc5d33ad7
被攻击合约:
https://etherscan.io/address/0xC1E088fC1323b20BCBee9bd1B9fC9546db5624C5
合约代码:
SiloV2Facet:https://etherscan.io/address/0x23d231f37c8f5711468c8abbfbf1757d1f38fda2#code
GovernanceFacet:https://etherscan.io/address/0xf480eE81a54E21Be47aa02D0F9E29985Bc7667c4#code
交易分析:
https://versatile.blocksecteam.com/tx/eth/0xcd314668aaa9bbfebaf1a0bd2b6553d01dd58899c508d4729fa7311dc5d33ad7

---

GovernanceFacet合约中vote函数的票数是根据用户deposit代币所得Stalk得到的.
同时emergencyCommit函数只要对应bip创建1天,且票是大于等于2/3,即可立即执行bip对应合约.(即短时拥有大于2/3的stalk即可获得当前合约的全部资产—通过质押大量代币后vote 提前一天创建的提案,调用emergencyCommit立即执行任意合约).