DEX pricing level in Ethernaut

[scottt]

@PatrickAlphaC, What do you think about my proposed "evil token attack" for the Dex level?

Proposed New Level: Dex2 (Attack of the Evil ERC20 Token)

In the Dex level in Ethernaut, the swap method currently doesn't check that the ERC20 addresses are the ones it expects: function swap(address from, address to, uint amount) public { require(IERC20(from).balanceOf(msg.sender) >= amount, "Not enough to swap"); uint swap_amount = get_swap_amount(from, to, amount); IERC20(from).transferFrom(msg.sender, address(this), amount); IERC20(to).approve(address(this), swap_amount); IERC20(to).transferFrom(address(this), msg.sender, sw…

I still like the idea of adding:
require((from == token1 && to == token2) || (from == token2 && to == token1 )
to Dex.swap and having a separate level without that check.