Submission Details
Severity:
[L-1] Missing Vault Allowance Checks Risk Failed Transfers at `StabilityBranch`
Summary
The fulfillSwap function doesn't verify vault allowances, causing swaps to revert and funds to be stuck.
Recommendations
// Check allowance before transfer
require(
IERC20(asset).allowance(vault.indexToken, address(this)) >= amountNeeded,
"Insufficient allowance"
);
Prize pool breakdown
Total prize
70,000 USDC
nSLOC
3,25821 USDC / LOC
66,500
3,500
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.