OnlyPwner - Jump N Run - Writeup

题目信息

• 题目名称: Jump N Run
• 作者: bobface
• 难度: 高级
• 类型: 智能合约安全 / EVM 字节码注入

题目描述

This is our new, shiny, permissionless multi-user oracle. It's only V1 and missing half its features, but we deployed it anyway to get some traction. With this little code, there can't really be anything wrong with it.

胜利条件

获得超过初始的 50 ETH。

漏洞分析

1. 核心合约结构

题目包含以下关键合约：

• MultiSourceOracle: 主预言机合约，管理多个用户的预言机实例
• UserOracle: 用户预言机模板，缓存价格数据
• UserLib: 用户数据管理库，包含关键的越界写入漏洞