First Flight #22: Steaking

Beginner FriendlyFoundryDeFi
100 EXP
Submission Details
Severity: high
Valid

An attacker could use other people's funds to deposit into the vault in their favor.

Updates

Lead Judging Commences

inallhonesty Lead Judge 3 months ago
Submission Judgement Published
Validated
Assigned finding tags:

`Steaking:depositIntoVault` fails to update the users balance allowing contract draining to repeat call

Support

FAQs

Can’t find an answer? Join our Discord or follow us on Twitter.

Cyfrin
Updraft
CodeHawks
Solodit
Resources