The minWithdrawTokenAmt parameter set by the user may not work
Summary
When the user performs a withdraw operation, if the user takes out an lptoken, the afterWithdrawChecks function is not executed for checking.
Vulnerability Details
When the user performs a withdraw operation, if the user takes out an lptoken, the afterWithdrawChecks function is not executed for checking. The minWithdrawTokenAmt set by the user will also not take effect, to the detriment of the user. other checks in the afterWithdrawChecks function are also bypassed, which is risky for vault.
Impact
May affect user revenue, as well as pose a risk to vault.
Tools Used
manual
Recommendations
It is recommended that the afterWithdrawChecks function be executed for checking anyway.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.