Open c4-bot-6 opened 5 months ago
0xRobocop marked the issue as duplicate of #250
0xRobocop marked the issue as duplicate of #156
3docSec marked the issue as satisfactory
Does not mention redeem, 50% credit
3docSec marked the issue as partial-50
3docSec changed the severity to QA (Quality Assurance)
3docSec marked the issue as grade-b
Lines of code
https://github.com/code-423n4/2024-03-ondo-finance/blob/main/contracts/ousg/ousgInstantManager.sol#L230
Vulnerability details
Vulnerability Detail
mint() is for triggers minting OUSG for a given amount of USDC.
Impact
This could potentially lead to losses in USDC for users, ousgAmountOut may less than user's expect due to the influence of the OUSG price.
Proof of Concept
https://github.com/code-423n4/2024-03-ondo-finance/blob/main/contracts/ousg/ousgInstantManager.sol#L230
Tools Used
Recommended Mitigation Steps
Add a deadline check and consider parameters such as ousgMinAmountOut.
Assessed type
MEV