Summary

After making deposits, there was no provision in the deposit function to keep track of the amount deposited.

Vulnerability Details

The reason why not keeping track of how much has been deposited is an issue is that a possible reentrant can be called through the redeem function making the attacker exploit the contract for the funds of other users.

Impact

Tools Used

Manual Review

Recommendations

Update the s_tokenToAssetToken in deposit function and ensure that CEI is implemented to avoid any reentrancy.