Submission Details
Severity:
`plenty` balances are not migrated on L2
Summary
plenty balances are not migrated on L2
Vulnerability Details
When migration starts all of the beanEth, beanwsteth and bean3crv is transferred and migrated automatically. As these will be plenty tokens, this will make it impossible for users to claim their allocated plenty.
As the plenty amounts are also not migrated on L2, the user-accrued plenty will simply be lost.
function init() external {
// Pause beanstalk, preventing future sunrises.
s.paused = true;
s.pausedAt = uint128(block.timestamp);
emit Pause(block.timestamp);
// transfer the following whitelisted silo assets to the BCM:
// bean:eth
IERC20 beanEth = IERC20(C.BEAN_ETH_WELL);
uint256 beanEthBalance = beanEth.balanceOf(address(this));
beanEth.transfer(BCM, beanEthBalance);
// BEAN:WstETH
IERC20 beanwsteth = IERC20(C.BEAN_WSTETH_WELL);
uint256 beanwstethBalance = beanwsteth.balanceOf(address(this));
beanwsteth.transfer(BCM, beanwstethBalance);
// BEAN:3CRV
IERC20 bean3crv = IERC20(C.CURVE_BEAN_METAPOOL);
uint256 bean3crvBalance = bean3crv.balanceOf(address(this));
bean3crv.transfer(BCM, bean3crvBalance);
}
Impact
Loss of funds
Tools Used
Manual review
Recommendations
Migrate the plenty values on L2 and allow users to claim it
Updates
Lead Judging Commences
inallhonesty over 1 year ago
Submission Judgement Published Reason: Design choice
Assigned finding tags:
`plenty` balances are not migrated on L2
Appeal created
deadrosesxyz
over 1 year ago
inallhonesty
over 1 year ago
inallhonesty about 1 year ago
Submission Judgement Published Assigned finding tags:
`plenty` balances are not migrated on L2
Prize pool breakdown
Total prize
250,000 USDC
nSLOC
12,28520
USDC / LOC
220,000 USDC
10,000 USDC
20,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.