highFlash loan attackEVM-Solidity
BakerFi: When harvesting a strategy and adjusting the debt, all the leftover collateral that is not used to swap the withdrawn collateral from Aave for WETH to repay the flashloan will be locked and lost in the Strategy contract
- Payout
- $0
- Protocol
- BakerFi
- Disclosed
- Jun 24, 2024
- Source
- code4rena
The BakerFi strategy contract suffers from a logic flaw during the harvesting process where it incorrectly calculates the amount of collateral required to repay a flash loan. By using a hardcoded fee tier for price estimation, the contract frequently withdraws …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-05-bakerfi-findings/issues/38
- https://github.com/code-423n4/2024-05-bakerfi-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.