DeFiFoundrySolidity
16,653 OP
View results
Submission Details
Severity: low
Invalid

Incomplete balance accounting in `balanceDeployed()` function leads to underreporting

Description

The balanceDeployed() function does not include the claimable WETH balance from the transmuter in its total calculation. This leads to an underreporting of the strategy's total assets since funds that could be claimed via transmuter.claim() are not counted.

The function currently only sums:

  • Unexchanged balance via getUnexchangedBalance()

  • Direct WETH balance via underlying.balanceOf()

  • Direct alETH balance via asset.balanceOf()

Recommendation

Update balanceDeployed() to include the claimable balance in its sum:

function balanceDeployed() public view returns (uint256) {
return transmuter.getUnexchangedBalance(address(this)) +
transmuter.getClaimableBalance(address(this)) +
underlying.balanceOf(address(this)) +
asset.balanceOf(address(this));
}
Updates

Appeal created

inallhonesty Lead Judge 6 months ago
Submission Judgement Published
Validated
Assigned finding tags:

balanceDeployed should include claimable

inallhonesty Lead Judge
6 months ago
inallhonesty Lead Judge 6 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.