Sponsor decided not to mitigate the issue with the following comment:
This is as expected
I agree that the issue is TOO broad and some of the described scenarios don't make sense at all (e.g. the approval while redeeming) or are highly unlikely (e.g. RockerPool returning a zero address). I would only consider the following:
SfrxEth staking pause. I've described this issue in MR for issue M-05.
Reth burn in the withdraw() function has been already addressed as part of the mitigation for issue H-07.
Mitigation of M-06: See comments
Link to Issue: https://github.com/code-423n4/2023-03-asymmetry-findings/issues/770
Comments
Sponsor decided not to mitigate the issue with the following comment:
I agree that the issue is TOO broad and some of the described scenarios don't make sense at all (e.g. the approval while redeeming) or are highly unlikely (e.g. RockerPool returning a zero address). I would only consider the following:
withdraw()
function has been already addressed as part of the mitigation for issue H-07.