fix FuzzyIdentity

Author: minaminao

foundry.lock

@@ -0,0 +1,26 @@
+{
+  "lib/forge-std": {
+    "tag": {
+      "name": "v1.9.7",
+      "rev": "77041d2ce690e692d6e03cc812b57d1ddaa4d505"
+    }
+  },
+  "lib/openzeppelin-contracts": {
+    "rev": "cae60c595b37b1e7ed7dd50ad0257387ec07c0cf"
+  },
+  "lib/solady": {
+    "rev": "7175c21f95255dc7711ce84cc32080a41864abd6"
+  },
+  "lib/v2-core": {
+    "rev": "ee547b17853e71ed4e0101ccfd52e70d5acded58"
+  },
+  "lib/foundry-huff": {
+    "rev": "7648faf3990cc4561d52b71af03282fad3a803d8"
+  },
+  "lib/prb-math": {
+    "rev": "77fa88eda4a4a91b3f3e9431df291292c26b6c71"
+  },
+  "lib/solmate": {
+    "rev": "bfc9c25865a274a7827fea5abf6e4fb64fc64e6c"
+  }
+}

lib/forge-std

@@ -20,14 +20,17 @@ contract ExploitTest is Test {
 
         Create2Deployer deployer = new Create2Deployer();
         assert(address(deployer) == deployerAddr);
-        bytes32 salt = bytes32(uint256(787669)); // found by _testSearchSalt
+        bytes32 salt = bytes32(uint256(3289423)); // found by _testSearchSalt
         address exploitAddr = deployer.deploy(vm.getCode("Exploit.t.sol:FuzzyIdentityExploit"), salt);
         FuzzyIdentityExploit(exploitAddr).exploit(address(challenge));
 
         vm.stopPrank();
         assertTrue(challenge.isComplete(), "Challenge is not complete");
     }
 
+    // this function is used to find the salt, but it uses a lot of gas, so it should be called only once.
+    // usually, the function name changes to `_testSearchSalt` after the salt is found.
+    // use the following command: forge test -vv
     function _testSearchSalt() public view {
         bytes memory creationCode = vm.getCode("Exploit.t.sol:FuzzyIdentityExploit");
         for (uint256 salt = 0; salt < (1 << 32); salt++) {
@@ -44,7 +47,7 @@ contract ExploitTest is Test {
                 id <<= 4;
             }
             if (bad) {
-                console.log("Salt found: %d", salt);
+                console.log("salt %d", salt);
                 break;
             }
         }

src/CaptureTheEther/FuzzyIdentity/Exploit.t.sol

@@ -9,8 +9,8 @@ contract FuzzyIdentityChallenge {
     bool public isComplete;
 
     function authenticate() public {
-        require(isSmarx(msg.sender));
-        require(isBadCode(msg.sender));
+        require(isSmarx(msg.sender), "Not smarx");
+        require(isBadCode(msg.sender), "Not bad code");
 
         isComplete = true;
     }