Seems to be an inattention error #18
Labels
3 (High Risk)
Assets can be stolen/lost/compromised directly
bug
Something isn't working
duplicate
This issue or pull request already exists
resolved
Finding has been patched by sponsor (sponsor pls link to PR containing fix)
sponsor confirmed
Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")
Lines of code
https://github.com/Rari-Capital/solmate/blob/1205a9067ff957ef8b0b003ff9d77c20ef9f2e0b/src/mixins/ERC4626.sol#L67
Vulnerability details
Shouldn't it be
_mint(to, shares);
?Currently the using
mint
, one would receive as many shares as assets they transfer, which is not the intended behaviourThe text was updated successfully, but these errors were encountered: