Closed code423n4 closed 3 years ago
s1m0
The blockDelay variable is not set so at deploy time the flashProof() modifier doesn't work as expected.
https://github.com/code-423n4/2021-04-vader/blob/main/vader-protocol/contracts/USDV.sol#L41
Manual analysis
Set the blockDelay in the init() with a predefined value or through an argument.
duplicate of #307
Handle
s1m0
Vulnerability details
Impact
The blockDelay variable is not set so at deploy time the flashProof() modifier doesn't work as expected.
Proof of Concept
https://github.com/code-423n4/2021-04-vader/blob/main/vader-protocol/contracts/USDV.sol#L41
Tools Used
Manual analysis
Recommended Mitigation Steps
Set the blockDelay in the init() with a predefined value or through an argument.