code-423n4 / 2023-06-xeth-mitigation-findings

0 stars 0 forks source link

M-09 MitigationConfirmed #10

Open code423n4 opened 1 year ago

code423n4 commented 1 year ago

Lines of code

Vulnerability details

in withdrawAllAndUnwrap() the clpToken transfer to AMO.sol may be locked in the contract

Mitigation

https://github.com/code-423n4/2023-05-xeth/commit/a840dc0b8a1de59a3ea06e0814ea3ce26707bdae

This PR has been modified to transfer to msg.sender so it won't be locked in AMO.sol. The mitigation resolved the original issue.

c4-judge commented 1 year ago

kirk-baird marked the issue as satisfactory