Core Contracts

Summary

If amount > balanceOf(from), it will revert.

Attackers could block burns by transferring tokens away just before execution.

Vulnerability Details

function burn(address from, uint256 amount) external override onlyStabilityPool {

if (from == address(0))

revert InvalidAddress();

if (amount == 0)

revert InvalidAmount();

_burn(from, amount); }

Impact

Tools Used

Recommendations

1. Check if the user has enough tokens before burning.

2. Ensure burning is limited to actual balance.

function burn(address from, uint256 amount) external override onlyStabilityPool {

uint256 balance = balanceOf(from);

if (amount > balance) revert BurnAmountExceedsBalance();

_burn(from, amount); }