The Economic Attack Simulator answers the question a detector can’t: is this attack actually worth running? You pick an attack family, describe the pool and the target, add the execution costs, and it computes the profit — and plots how that profit changes as the price moves.
Why it exists
A detector hit is a possibility, not a payday. Plenty of theoretically exploitable findings never get attacked because the gas, slippage, and capital costs swamp the gains. The simulator lets you model realistic market conditions and see whether a candidate attack clears that bar before you elevate its severity.
Who uses it
- Auditor — tests whether a finding is profitable under real pool conditions before calling it critical.
- Researcher — explores the parameter space looking for strategies that pay.
How to open it
- Sidebar → Simulation → Economic Simulator.
- Direct URL —
/economic-simulator.
Running a scenario
Choose an attack family — oracle manipulation, sandwich, or griefing — then fill three input groups: the pool (a constant-product AMM, with Fetch real TVL to pull live pool state from chain), the downstream target the attack acts on, and the execution costs (gas, slippage, and the like). The page then shows a scenario summary, a per-step profit breakdown, and a sensitivity chart of net profit against the assumed price shift — so you can see not just whether it pays, but how sensitive that is to your assumptions.
Limits
- Requires a signed-in account.
- The pool model is constant-product; other AMM designs aren’t simulated directly.
- Gas, price-shift, and MEV parameters are yours to supply — the simulator computes from them, it doesn’t infer them. A breakdown that’s negative everywhere is the tool telling you the attack doesn’t pay.
Related pages
- Governance Risk — concentration analysis for governance tokens.
- Upgrade Simulator — proxy-upgrade safety checks.
- Exploit Lab — capsule-based reproduction of a confirmed exploit.