Vault inflation attack - Githubissues

Fujicracy / fuji-v2

Cross-chain money market aggregator

https://fuji-v2-frontend.vercel.app

15 stars 10 forks source link

Vault inflation attack #498

Closed 0xdcota closed 1 year ago

0xdcota commented 1 year ago

This pull request addresses vulnerabilities M-1 of Macro audit report.

pedrovalido commented 1 year ago

Lets have a brainstorm session to try and attack the newly implemented fix. Action to consider:

deposit
withdraw
payback
borrow
transfer
burn
malicious providers
etc (open to more suggetions)

@DaigaroCota

pedrovalido commented 1 year ago

Possible solution: when deploying a vault, use the initializeVaultShares function to also deposit a certain amount of real assets instead of faking. Do the same for debt.

0xdcota commented 1 year ago

This pull request was overriden by #541 .