Submission Details
Severity:
Residual allowance in vault approvals
Summary
Approving curveVault without resetting the allowance could allow residual usage in the RAAC protocol.
Vulnerability Details
When approving curveVault, not resetting the allowance first could leave residual allowances that might be exploited if the vault turns malicious.
Impact
This issue poses a low risk but could lead to unauthorized token transfers if a malicious vault takes advantage of the residual allowances.
Tools Used
Manual review
Recommendations
Use safeIncreaseAllowance in vault interactions to manage allowances securely.
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.