56346 sc insight redundant calculation of feeamount in repay function
Description
Brief/Intro
Vulnerability Details
function repay(uint256 amount, uint256 recipientTokenId) public returns (uint256) {
...
// Debt is subject to protocol fee similar to redemptions
uint256 feeAmount = creditToYield * protocolFee / BPS;
...
} else {
account.collateralBalance -= creditToYield * protocolFee / BPS;
}
...
TokenUtils.safeTransfer(myt, protocolFeeReceiver, creditToYield * protocolFee / BPS);
_mytSharesDeposited -= creditToYield * protocolFee / BPS;
...
} Impact Details
References
Proof of Concept
Previous58002 sc low missing submitremovestrategy function Next57749 sc low zeroxswapverifier misses critical sender recipient minout validations allowing malicious 0x calldata to drain funds critical direct theft
Was this helpful?