search

code-423n4 / 2021-04-vader-findings

1 stars 0 forks source link

Tokens are vulnerable to double-spend allowance #311

Closed code423n4 closed 3 years ago

code423n4 commented 3 years ago

Handle

s1m0

Vulnerability details

Impact

Vader, USDV and VETH are vulnerable to double-spend allowance attack in which an attacker can front-run the execution of an approve() function.

Proof of Concept

-

Tools Used

Manual analysis

Recommended Mitigation Steps

Consider implementing increaseAllowance() and decreaseAllowance().

strictly-scarce commented 3 years ago

hypothetical

dmvt commented 3 years ago

duplicate of #35