Lucene search
+L

1 matches found

Code423n4
Code423n4
•added 2022/06/11 12:00 a.m.•7 views

wfCashERC4626.withdraw() missing some asset balance checks and calculations can drain contract

Lines of code Vulnerability details Impact The withdraw function in wfCashERC4626.sol has no check for asset token balanceOf and calculations before and after transfer. With this, a user can keep calling withdraw multiple times and keep gaining more assets. Proof of Concept 1. Assume redeemIntern...

6.9AI score
SaveExploits0
Rows per page
Query Builder