mediumLogic errorEVM-Solidity
Midas - Instant Minter/Redeemer: Standard redemption in `RedemptionVault` does not update token allowance.
- Payout
- $0
- Protocol
- Midas - Instant Minter/Redeemer
- Disclosed
- Aug 27, 2024
- Source
- sherlock
Midas's RedemptionVault implements an allowance-based redeem cap in its TokenConfig, enforced for standard deposits and instant redemptions, but the standard (non-instant) redemption path in `_redeemRequest` never calls `_requireAndUpdateAllowance` on the toke …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.