highOracle manipulationEVM-Solidity
Tapioca DAO: Anybody can buy collateral on behalf of other users without having any allowance using the multiHopBuyCollateral()
- Payout
- $0
- Protocol
- Tapioca DAO
- Disclosed
- Nov 16, 2023
- Source
- code4rena
A unauthorized debt creation vulnerability was identified in Tapioca DAO's SGLLeverage contract. The multiHopBuyCollateral function verifies user allowance when depositing additional collateral shares, but fails to check whether the caller has authorization or …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-07-tapioca-findings/issues/493
- https://github.com/code-423n4/2023-07-tapioca-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.