You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description: Description
DepositBatch will be unusable with tokens like USDT
Attack Scenario
Tokens like USDT cannot be set a non-zero approval if they already have a non-zero approval set. When depositing via DepositBatch, the entire balance is approved to the Portfolio contract, although it is not necessary that all of it will be used (due to the ratios of the tokens). If the entire approval is not used, next deposit including USDT will fail.
Attachments
Proof of Concept (PoC) File
Revised Code File (Optional)
The text was updated successfully, but these errors were encountered:
Github username: @@deadrosesxyz
Twitter username: @deadrosesxyz
Submission hash (on-chain): 0xc5ed71f74eeb4d930c8236894220feab15a74b51a9fb1aed95376f8c49ef2ad9
Severity: medium
Description:
Description
DepositBatch will be unusable with tokens like USDT
Attack Scenario
Tokens like USDT cannot be set a non-zero approval if they already have a non-zero approval set. When depositing via
DepositBatch
, the entire balance is approved to thePortfolio
contract, although it is not necessary that all of it will be used (due to the ratios of the tokens). If the entire approval is not used, next deposit including USDT will fail.Attachments
The text was updated successfully, but these errors were encountered: