HardhatDeFi
15,000 USDC
View results
Submission Details
Severity: low
Invalid

`AaveDIVAWrapperCore::_redeemWToken` function is not necessary for this contract, because the wTokens are only minted to the wrapperContract and user does not own any wToken themselves.

Summary

AaveDIVAWrapperCore::_redeemToken function Burns the wToken from the userBalance, but in this contract the user does not own any wTokens as all the tokens are minted to the wrapper contract.

Vulnerability Details

Proof Of Concept

wTokens are minted only to the wrapper contract.

Here is the Invariant Break.

Impact

This function will never execute because the user does not own any wTokens.

Tools Used

Manual Review

Recommendations

Remove this function from the contract.

Updates

Lead Judging Commences

bube Lead Judge 6 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.