mediumGovernance attackEVM-Solidity
Maia DAO Ecosystem: `vMaia` is ERC-4626 compliant, but the `maxWithdraw` & `maxRedeem` functions are not fully up to EIP-4626's specification
- Payout
- $0
- Protocol
- Maia DAO Ecosystem
- Disclosed
- Sep 18, 2023
- Source
- code4rena
In the Maia DAO ecosystem, the `vMaia` contract restricts withdrawals to the first Tuesday of every month, causing calls to `withdraw` or `redeem` outside this window to revert. However, `maxWithdraw` and `maxRedeem` continue to return the user's full token ba …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-05-maia-findings/issues/585
- https://github.com/code-423n4/2023-05-maia-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.