Beanstalk: The Finale

DeFiHardhatFoundry
250,000 USDC
Submission Details
Severity: high
Invalid

Protocol doesn't consider the tractor logic with the implementation of the `LibEth#refundEth()`

Updates

Lead Judging Commences

Lead Judge 3 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Refunding ETH to the caller can be exploited using the Tractor component to call any arbitrary function on behalf of the publisher

Appeal created

giovannidisiena Auditor
3 months ago
Lead Judge 3 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can’t find an answer? Join our Discord or follow us on Twitter.

Cyfrin
Updraft
CodeHawks
Solodit
Resources