Submission Details
Severity:
wrap in WStETHMock.sol vulnerable to reentrancy
Summary
wrap in WStETHMock.sol vulnerable to reentrancy
Vulnerability Details
Inside wrap() ,minting of stETHAmount_ amount of tokens is happening first and afterwards the stETHAmount_ amount of tokens are transferred from msg.sender to the contract address thus creating a re-entrancy attack.
function wrap(uint256 stETHAmount_) external returns (uint256) {
require(stETHAmount_ > 0, "wstETH: can't wrap zero stETH");
_mint(msg.sender, stETHAmount_);
stETH.transferFrom(msg.sender, address(this), stETHAmount_);
return stETHAmount_;
}
Impact
Complete depletion of the token balance within the contract.
Tools Used
Manual Review
Recommendations
First Transfer tokens to contract and then mint the amount of tokens to msg.sender.
Updates
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.