Submission Details
Severity:
Mint Tokens using Flash loan
Vulnerability Details
User can maliciously mint the tokens using the flash loans.In the flash loan function the check of the repayment is done by checking the token balance of the assetToken contract this can be increased just by depositing the tokens so by doing this we can mint the assetTokens and no need of paying the flashloan back because of the increase in token balance of the assetToken.
uint256 endingBalance = token.balanceOf(address(assetToken));
if (endingBalance < startingBalance + fee)
Impact
High
Tools Used
Manual Review
Recommendations
stop the use of deposit when the time of flshloan
Updates
Lead Judging Commences
0xnevi over 1 year ago
Submission Judgement Published Assigned finding tags:
flash loan funds stolen by a deposit
Rewards breakdown
nSLOC
387This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.