code-423n4 / 2021-10-ambire-findings

0 stars 0 forks source link

Call deposit() in the WETH contract #43

Closed code423n4 closed 3 years ago

code423n4 commented 3 years ago

Handle

cryptojedi88

Vulnerability details

Impact

In the Zapper.sol, in the function wrapETH(), rather than sending ETH to the default payable function, call the deposit() function in WETH since it calls that function anyway.

Recommended Mitigation Steps

Call deposit() function in the WETH contract directly.

Ivshti commented 3 years ago

duplicate of #27

GalloDaSballo commented 3 years ago

Duplicate of #27