Beanstalk: The Finale

DeFiHardhatFoundry
250,000 USDC
Submission Details
Severity: high
Invalid

Multiple contracts are not compatible with `TractorFacet`

Updates

Lead Judging Commences

inallhonesty Lead Judge 4 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Refunding ETH to the caller can be exploited using the Tractor component to call any arbitrary function on behalf of the publisher

Appeal created

deadrosesxyz Submitter
4 months ago
deadrosesxyz Submitter
4 months ago
inallhonesty Lead Judge
4 months ago
giovannidisiena Auditor
3 months ago
inallhonesty Lead Judge 3 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can’t find an answer? Join our Discord or follow us on Twitter.

Cyfrin
Updraft
CodeHawks
Solodit
Resources