Lucene search
+L

1 matches found

Code423n4
Code423n4
added 2022/03/31 12:00 a.m.11 views

[WP-H3] Proxy admin of the upgradeable proxy contracts can steal _borrowAsset and collateralAsset from the contracts and users' wallet

Lines of code Vulnerability details Both LenderPool and PooledCreditLine are upgradeable contract that holds users' allowances, and in certain periods, LendingPool will be holding users' funds. Use of Upgradeable Proxy Contract Structure allows the logic of the contract to be arbitrarily changed...

6.8AI score
SaveExploits0
Rows per page
Query Builder