Description:Description\
The VaultBitcoinWallet - setFee() function allows any number in uint64 to be set as a _satoshiPerByte. This can lead to several problems:
setting the fee higher than 100%
fee setter can front-backrun users to grief them their total amount of sent funds
Recommendation\
Consider to mitigate this issue by setting a reasonable maximum upper cap for the fee (e.g. 20%)
Github username: -- Twitter username: -- Submission hash (on-chain): 0x7baf24a0cebcf0d5ca1b040bf9acfb1704ec36671a023d3039cd93e474ee66a9 Severity: medium
Description: Description\ The
VaultBitcoinWallet
-setFee()
function allows any number inuint64
to be set as a_satoshiPerByte
. This can lead to several problems:Recommendation\ Consider to mitigate this issue by setting a reasonable maximum upper cap for the fee (e.g. 20%)