Refactor tests

test/unit/AavePM/AttackTest.t.sol → test/unit/AttackTest.t.sol

@@ -43,7 +43,7 @@ contract AavePMAttackTests is AavePMTestSetup {
 
         vm.startPrank(attacker1);
         vm.expectRevert(InvalidInitialization.selector);
-        aavePM.initialize(attacker1, contractAddresses, tokenAddresses, uniswapV3Pools, 250, 200);
+        aavePM.initialize(attacker1, contractAddresses, tokenAddresses, uniswapV3Pools, 250, 200, 20);
         vm.stopPrank();
     }
 

test/unit/EvilManagerTest.t.sol

@@ -0,0 +1,34 @@
+// SPDX-License-Identifier: MIT
+pragma solidity 0.8.24;
+
+import {AavePMTestSetup} from "test/unit/AavePM/TestSetupTest.t.sol";
+import {console} from "forge-std/Test.sol";
+
+import {IAavePM} from "src/interfaces/IAavePM.sol";
+import {IAccessControl} from "@openzeppelin/contracts/access/IAccessControl.sol";
+import {IPool} from "@aave/aave-v3-core/contracts/interfaces/IPool.sol";
+
+// ================================================================
+// │                      EVIL MANAGER TESTS                     │
+// ================================================================
+
+// If a manager address is compromised these tests show the impact.
+contract AavePMEvilManagerTests is AavePMTestSetup {
+    function evilManagerSetup() public {
+        vm.startPrank(manager1);
+        sendEth(address(aavePM), SEND_VALUE);
+        aavePM.aaveSupplyFromContractBalance();
+        aavePM.reinvest();
+        vm.stopPrank();
+    }
+
+    function testFail_EvilManagerLoopDrain() public {
+        evilManagerSetup();
+        vm.startPrank(manager1);
+        for (uint256 i = 0; i <= aavePM.getManagerDailyInvocationLimit() + 1; i++) {
+            aavePM.deleverage();
+            aavePM.reinvest();
+        }
+        vm.stopPrank();
+    }
+}