1 matches found
Able to call withdrawContributions with any vaultId may lead to loss of funds
Lines of code Vulnerability details Impact The withdrawContributions function in Migration.sol takes any vault as input. As long as the vault is valid and has an inactive buyout, a user may call withdrawContributions even if the proposal they contributed to is LIVE. This may lead to users not bei...
6.7AI score
SaveExploits0
20