Submission Details
Severity:
bad totalAsset accounting in _harvestAndReport
Summary
bad totalAsset accounting, it is mixing WETH and alETH but should return only alETH in the 3 strategies: mainnet, arb and op
uint analysis
_totalAssets = unexchanged + asset.balanceOf(address(this)) + underlyingBalance;
_totalAssets = [WETH] + [alETH] + [WETH] but documentation says it should be the underlying asset of the staretegy, so alETH.
Vulnerability Details
Impact
Bad accounting when alETH and WETH depeg which is the porpuse of the strategy is to profit from depeg.
Tools Used
vs code
Recommendations
Normalize accounting to the underlying of the strategy
Prize pool breakdown
Total prize
16,653 OP
nSLOC
25366 OP / LOC
15,800
853
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.