1 matches found
wfCashERC4626.withdraw() missing some asset balance checks and calculations can drain contract
Lines of code Vulnerability details Impact The withdraw function in wfCashERC4626.sol has no check for asset token balanceOf and calculations before and after transfer. With this, a user can keep calling withdraw multiple times and keep gaining more assets. Proof of Concept 1. Assume redeemIntern...
6.9AI score
SaveExploits0
20