Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: high
Invalid

Empty strategies Array Causing Suboptimal Withdrawals

kobbyeugene

Summary

The strategies array is empty, forcing the vault to use default withdrawal paths, which may incur higher slippage or fees.

Vulnerability Details

By passing an empty strategies array (new address[](0)), the contract does not specify priority strategies for withdrawals. This can result in inefficient asset retrieval (e.g., using high-fee pools).

Impact

  • Increased withdrawal costs for users.

  • Potential transaction failures if default strategies are deprecated.

Tools Used

Manual review

Recommendations

function _withdrawFromVault(uint256 amount, address[] calldata strategies) internal {
curveVault.withdraw(amount, msg.sender, msg.sender, 0, strategies);
totalVaultDeposits -= amount;
}
Updates

Lead Judging Commences

inallhonesty Lead Judge about 1 month ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
inallhonesty Lead Judge about 1 month ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.