Open code423n4 opened 1 year ago
in withdrawAllAndUnwrap() the clpToken transfer to AMO.sol may be locked in the contract
https://github.com/code-423n4/2023-05-xeth/commit/a840dc0b8a1de59a3ea06e0814ea3ce26707bdae
This PR has been modified to transfer to msg.sender so it won't be locked in AMO.sol. The mitigation resolved the original issue.
msg.sender
AMO.sol
kirk-baird marked the issue as satisfactory
Lines of code
Vulnerability details
in withdrawAllAndUnwrap() the clpToken transfer to AMO.sol may be locked in the contract
Mitigation
https://github.com/code-423n4/2023-05-xeth/commit/a840dc0b8a1de59a3ea06e0814ea3ce26707bdae
This PR has been modified to transfer to
msg.sender
so it won't be locked inAMO.sol
. The mitigation resolved the original issue.