Summary

The function purrrCollateralFromAave of the KittyVault does not check the actual amount withdrawn from the Aave pool. If there is a liquidity shortage and the pool returns a lower amount than requested, the function will still update the totalMeowllateralInVault with the requested amount, leading to an inaccurate representation of the collateral held in the vault.

Vulnerability Details

The function does not handle the case where the Aave pool returns a lower withdrawal amount than requested due to liquidity shortage, leading to an inaccurate representation of the collateral held in the vault.

Impact

Tools Used

Recommendations

Consider adding a check to ensure the actual withdrawn amount matches the requested amount, and update the totalMeowllateralInVault accordingly. This will help maintain the accurate state of the collateral held in the vault.