The maxDeposit
function calls the totalAssets
function without considering pending deposits or withdrawals.
The maxDeposit
function calls the totalAssets
function to get the total assets in the vault, but it does not take into account any pending deposits or withdrawals that may have been made but not yet processed. This could potentially lead to incorrect calculations of the maximum deposit amount.
Low. Incorrect calculations of the maximum deposit amount could lead to unexpected behavior or vulnerabilities, potentially causing financial loss or incorrect state.
Manual code review and analysis.
Modify the maxDeposit
function to take into account any pending deposits or withdrawals, or use a more accurate method to calculate the total assets in the vault.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.