Lines of code

Vulnerability details

Impact

The manager’s fee is determined by the flash loan amount he takes out. A manager can take out a large flash loan to increase the fee due to him.

Proof of Concept

Manager needs to rebalance a vault.
Manager only needs 50k flash loan.
Manager takes out 2m flash loan instead.
Manager gets a larger fee as a result.

Recommended Mitigation Steps

Use a fee that isn’t determined by the flash loan amount or limit the amount of flash loan a manager can take out.

The text was updated successfully, but these errors were encountered:

All reactions