A simulator with four input sections — Attack family, Pool
(constant-product), Downstream target, and Execution — that
computes an attack’s profit breakdown and plots net profit against
price shift.
Why it exists
A detector hit is not the same as a profitable attack. The
simulator lets an auditor or researcher model realistic market
parameters (pool state, downstream target, and execution cost) to
see whether a candidate attack is economically worthwhile before
elevating its severity.
Who uses it
Auditor — tests whether a finding is profitable under real
pool conditions.
Researcher — explores the parameter space for new attack
strategies.
How to open it
Sidebar → Simulation → Economic Simulator.
Direct URL — /economic-simulator.
Using the page
Attack family — radio group with oracle_manipulation,
sandwich, and griefing.
Pool (constant-product) — inputs for the AMM pool; use
Fetch real TVL to populate from chain.
Downstream target — the position or oracle consumer the
attack targets.
Execution — gas cost, slippage tolerance, and other
execution inputs.
Scenario — read-only summary of the chosen parameters.
Breakdown — per-step profit and cost breakdown.
Sensitivity: net profit vs. price shift — chart showing how
profit varies with the price-shift assumption.
Inputs and outputs
Input
Source
Required
Attack family
Radio group
yes
Pool parameters
Form inputs
yes
Downstream target
Form inputs
yes
Execution parameters
Form inputs
yes
Output
Format
Destination
Scenario summary
In-page
HTML
Profit breakdown
In-page
HTML
Sensitivity chart
SVG / Canvas
In-page
Controls reference
Attack family — oracle_manipulation / sandwich /
griefing.
Fetch real TVL — pulls live pool data into the pool fields.
Pool / Downstream target / Execution input groups.
Limits
Requires a signed-in account.
The pool model is constant-product; non-CPMM AMMs are not
simulated directly.
Gas, price shift, and MEV parameters are user-supplied — the
simulator does not infer them.
Troubleshooting
Symptom or error
Cause
Action
Fetch real TVL returns nothing
Pool address could not be resolved
Verify the pool address and network.
Breakdown shows negative profit everywhere
Execution costs exceed modelled gains
Adjust parameters; a negative result is the simulator working correctly.