Open sherlock-admin opened 1 year ago
Escalate for 10 USDC
This one was confirmed by the Sponsor
check the discussion for more details
Escalate for 10 USDC
This one was confirmed by the Sponsor check the discussion for more details
You've created a valid escalation for 10 USDC!
To remove the escalation from consideration: Delete your comment.
You may delete or edit your escalation comment anytime before the 48-hour escalation window closes. After that, the escalation becomes final.
Valid medium issue
Escalation accepted
Considering this issue a valid medium
Escalation accepted
Considering this issue a valid medium
This issue's escalations have been accepted!
Contestants' payouts and scores will be updated according to the changes made on this issue.
Ch_301
high
Asking for
balanceOf()
in the wrong addressSummary
Vulnerability Detail
on sendFundsToVault() this logic
in case
_chainId
is Optimism theunderlying
address is for Optimism (L2) butXChainController
is on Mainnet you can't invokebalanceOf()
like this!!!Impact
Asking for
balanceOf()
in the wrong address The protocol will be not able to rebalance the vaultCode Snippet
Tool used
Manual Review
Recommendation
getUnderlyingAddress(_vaultNumber, _chain);
should just begetUnderlyingAddress(_vaultNumber);
so theunderlying
herewill be always on the Mainnet