Summary

Reentrancy exploit on the Deposit function.

Vulnerability Details

as the deposit event is emitted AFTER the transfer is made with the external call safeTransferFrom(), the emitted event can be modified to benefit the attacker.
Ie deposit 1eth in first call, then reenter deposit function with 10eth, the deposit events emitted are then 10ETH + 10ETH. Attacker then gets minted 'free' ether on the L2

Impact

Attacker can mint more tokens on the L2 then they have deposited.

Tools Used

Recommendations

CEI, put the event emission before the safeTransferFrom().