Missing check to avoid zero transfer revert

Lines of code Vulnerability details Impact Cannot deploy market with originationFeeAmount == 0 for ERC20 asset which reverts on zero amount transfers. Proof of concept In deployMarket the following is executed: if originationFeeAsset != address0 originationFeeAsset.safeTransferFromborrower,...

Firefox ESR Code Execution

The Mozilla Firefox ESR browser contains a vulnerability related to errors in the implementation of the TypedArrayObject.cpp class. These errors allow for zero-transfer operations when using ArrayBuffer objects. Exploiting this vulnerability enables malicious actors to execute arbitrary code or...