code-423n4 / 2023-07-pooltogether-findings

12 stars 7 forks source link

Tokens with Phantom permit functions breaks the purpose of permits and thereby breaking composability #249

Closed code423n4 closed 1 year ago

code423n4 commented 1 year ago

Lines of code

https://github.com/GenerationSoftware/pt-v5-vault/blob/b1deb5d494c25f885c34c83f014c8a855c5e2749/src/Vault.sol#L1093-#L1104

Vulnerability details

Impact

Detailed description of the impact of this finding.

Proof of Concept

Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant proof that illustrates the concept.

Tools Used

Recommended Mitigation Steps

Assessed type

Invalid Validation

code423n4 commented 1 year ago

Withdrawn by Angry_Mustache_Man