openzeppelin-contracts/test/BreakInvariantBounty.test.js

const { ethGetBalance, ethSendTransaction } = require('./helpers/web3');
const { ether } = require('./helpers/ether');
const { sendEther } = require('./helpers/sendTransaction');
const { balanceDifference } = require('./helpers/balanceDiff');
const expectEvent = require('./helpers/expectEvent');
const { assertRevert } = require('./helpers/assertRevert');

const BreakInvariantBountyMock = artifacts.require('BreakInvariantBountyMock');
const TargetMock = artifacts.require('TargetMock');

require('chai')
  .use(require('chai-bignumber')(web3.BigNumber))
  .should();

const reward = ether(1);

contract('BreakInvariantBounty', function ([_, owner, researcher, anyone, nonTarget]) {
  beforeEach(async function () {
    this.bounty = await BreakInvariantBountyMock.new({ from: owner });
  });

  it('can set reward', async function () {
    await sendEther(owner, this.bounty.address, reward);
    (await ethGetBalance(this.bounty.address)).should.be.bignumber.equal(reward);
  });

  context('with reward', function () {
    beforeEach(async function () {
      await sendEther(owner, this.bounty.address, reward);
    });

    describe('claim', function () {
      it('is initially claimable', async function () {
        (await this.bounty.claimable()).should.equal(true);
      });

      it('can create claimable target', async function () {
        const { logs } = await this.bounty.createTarget({ from: researcher });
        expectEvent.inLogs(logs, 'TargetCreated');
      });

      context('with target', async function () {
        beforeEach(async function () {
          const { logs } = await this.bounty.createTarget({ from: researcher });
          const event = expectEvent.inLogs(logs, 'TargetCreated');
          this.target = TargetMock.at(event.args.createdAddress);
        });

        context('before exploiting vulnerability', async function () {
          it('reverts when claiming reward', async function () {
            await assertRevert(this.bounty.claim(this.target.address, { from: researcher }));
          });
        });

        context('after exploiting vulnerability', async function () {
          beforeEach(async function () {
            await this.target.exploitVulnerability({ from: researcher });
          });

          it('sends the reward to the researcher', async function () {
            await this.bounty.claim(this.target.address, { from: anyone });
            (await balanceDifference(researcher, () => this.bounty.withdrawPayments(researcher)))
              .should.be.bignumber.equal(reward);
            (await ethGetBalance(this.bounty.address)).should.be.bignumber.equal(0);
          });

          context('after claiming', async function () {
            beforeEach(async function () {
              await this.bounty.claim(this.target.address, { from: researcher });
            });

            it('is not claimable', async function () {
              (await this.bounty.claimable()).should.equal(false);
            });

            it('no longer accepts rewards', async function () {
              await assertRevert(ethSendTransaction({ from: owner, to: this.bounty.address, value: reward }));
            });

            it('reverts when reclaimed', async function () {
              await assertRevert(this.bounty.claim(this.target.address, { from: researcher }));
            });
          });
        });
      });

      context('with non-target', function () {
        it('reverts when claiming reward', async function () {
          await assertRevert(this.bounty.claim(nonTarget, { from: researcher }));
        });
      });
    });

    describe('cancelBounty', function () {
      context('before canceling', function () {
        it('is claimable', async function () {
          (await this.bounty.claimable()).should.equal(true);
        });

        it('can be canceled by the owner', async function () {
          const { logs } = await this.bounty.cancelBounty({ from: owner });
          expectEvent.inLogs(logs, 'BountyCanceled');
          (await balanceDifference(owner, () => this.bounty.withdrawPayments(owner)))
            .should.be.bignumber.equal(reward);
        });

        it('reverts when canceled by anyone', async function () {
          await assertRevert(this.bounty.cancelBounty({ from: anyone }));
        });
      });

      context('after canceling', async function () {
        beforeEach(async function () {
          await this.bounty.cancelBounty({ from: owner });
        });

        it('is not claimable', async function () {
          (await this.bounty.claimable()).should.equal(false);
        });

        it('no longer accepts rewards', async function () {
          await assertRevert(ethSendTransaction({ from: owner, to: this.bounty.address, value: reward }));
        });

        it('reverts when recanceled', async function () {
          await assertRevert(this.bounty.cancelBounty({ from: owner }));
        });
      });
    });
  });
});