Submission Details
Severity:
The Vault::initVault function can be exploited by front-running attacks
Summary
The Vault::initVault function can be exploited by front-running attacks
Vulnerability Details
The Vault::initVault function can be exploited by front-running attack. when transactions are executed in a specific order to exploit price changes or gain an unfair advantage.
/// @notice Init vault with the loveToken.
/// @notice Vault will approve its corresponding management contract to handle tokens.
/// @notice vaultInitialize protect against multiple initialization.
function initVault(ILoveToken loveToken, address managerContract) public {
if (vaultInitialize) revert Vault__AlreadyInitialized();
loveToken.initVault(managerContract);
vaultInitialize = true;
}
Impact
front-running attacks
Tools Used
Manual Review
Recommendations
we can use modifiers
Rewards breakdown
nSLOC
233This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.