Alchemix Transmuter
Alchemix
DeFiFoundrySolidity
16,653 OP
View results
Previous Next
Submission Details
Severity: low
Invalid

availableWithdrawLimit function returns incorrect value.

dreamcoder

Summary

In availableWithdrawLimit functions of StrategyArb.sol, StrategyMainnet.sol and StrategyOp.sol files

function availableWithdrawLimit(
address /*_owner*/
) public view override returns (uint256) {
return asset.balanceOf(address(this)) + transmuter.getUnexchangedBalance(address(this));
}

asset.balanceOf(address(this)) is amount that already withdrawn or not deposit.

Therefore the user can withdraw only transmuter.getUnexchangedBalance(address(this)) amount.

Tools Used

Manual

Recommendations

function availableWithdrawLimit(
address /*_owner*/) public view override returns (uint256) {
-- return transmuter.getUnexchangedBalance(address(this));
++ return asset.balanceOf(address(this)) + transmuter.getUnexchangedBalance(address(this));
}
Updates

Appeal created

inallhonesty Lead Judge 5 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement
inallhonesty Lead Judge 5 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.