Open code423n4 opened 1 year ago
Pool together used PRBMath library that has known vulnerability in pow function, which was used in DrawAccumulatorLib and TierCalculationLib.
pow
DrawAccumulatorLib
TierCalculationLib
As it was proposed by warden, pool together has updated solidity to v0.8.19 and upgraded the PRBMath to version V4.
Picodes marked the issue as satisfactory
Lines of code
Vulnerability details
Issue mitigated
About the problem
Pool together used PRBMath library that has known vulnerability in
pow
function, which was used inDrawAccumulatorLib
andTierCalculationLib
.Solution
As it was proposed by warden, pool together has updated solidity to v0.8.19 and upgraded the PRBMath to version V4.