Submission Details
Severity:
Missing balance validation in strategy contracts during token swap
In all three strategy contracts, the claimAndSwap function claims WETH from the transmuter and immediately attempts to swap it for alETH. However, there's no validation that the claimed WETH was actually received before proceeding with the swap:
function claimAndSwap(uint256 _amountClaim, uint256 _minOut, IRamsesRouter.route[] calldata _path) external onlyKeepers {
transmuter.claim(_amountClaim, address(this));
uint256 balBefore = asset.balanceOf(address(this));
_swapUnderlyingToAsset(_amountClaim, _minOut, _path);
// ...
}
If the transmuter claim fails silently or returns success without transferring tokens, the subsequent swap would fail or use old token balances, potentially leading to unintended behavior or stuck transactions.
Prize pool breakdown
Total prize
16,653 OP
nSLOC
25366 OP / LOC
15,800
853
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.