mediumGovernance attackEVM-Solidity
Maia DAO Ecosystem: `ERC4626PartnerManager.checkTransfer` does not check `amount` correctly, as it applies `bHermesRate` to `balanceOf[from]`, but not `amount`.
- Payout
- $0
- Protocol
- Maia DAO Ecosystem
- Disclosed
- Sep 18, 2023
- Source
- code4rena
A logic and unit-mismatch flaw in Maia DAO's `ERC4626PartnerManager` contract allowed users to transfer partner manager shares even when their underlying balance was insufficient to cover claimed weight, boost, and governance positions. When verifying if a use …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-05-maia-findings/issues/268
- https://github.com/code-423n4/2023-05-maia-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.