PT-2023-28349

Name of the Vulnerable Software and Affected Versions Hydra versions prior to 0.13.0 Description The issue arises from incorrect data validation logic in the head token minting policy, which results in a flawed check for burning the head ST in the initial validator. This is possible because it is...

User funds can be locked in RToken contract for a long time

Lines of code Vulnerability details Impact Unnecessary delay on the first issuance will lock the first issuer's deposit and other following deposits. Proof of Concept Users can issue new RTokens by depositing the necessary collaterals. The protocol is designed to limit issuance by some rate and t...