The Standard

Vulnerability Details

In the SmartVaultManagerV5 contract, the mint() function can be called multiple times to create empty vaults without requiring any deposits.

Impact

The ability to create empty vaults poses a significant risk, potentially attracting malicious actors or automated bots seeking to exploit the system. This vulnerability facilitates the easy creation of vaults at minimal cost, providing a substantial incentive for attackers.

Tools Used

Manual inspection

Recommendations

To mitigate this vulnerability, it is strongly advised to refrain from allowing the creation of empty vaults unless it is essential for the DeFi project's operation. Another option is to implement a requirement for a non-zero or minimum deposit during the vault deployment process can significantly enhance the security of the system and prevent potential DOS or other type of attacks.