mediumLogic errorEVM-Solidity
Midas - Instant Minter/Redeemer: Discrepancy between spec and code: Vault admin cannot update `tokensReceiver`.
- Payout
- $0
- Protocol
- Midas - Instant Minter/Redeemer
- Disclosed
- Aug 27, 2024
- Source
- sherlock
The Midas instant minter/redeemer's ManageableVault initializes a public tokensReceiver field that fixes where subscription funds and mTokens are delivered, but provides no setter to change it after deployment. The protocol's own specification lists the invest …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.