mediumLogic errorEVM-Solidity
Union Finance Update #2: Any user can claim an unlimited amount of vouch in `VouchFaucet.sol`
- Payout
- $0
- Protocol
- Union Finance Update #2
- Disclosed
- Jul 13, 2024
- Source
- sherlock
The VouchFaucet.sol contract exposes a public `claimVouch()` function with no access control or rate limiting. Any address can call it to grant themselves `TRUST_AMOUNT` of trust on behalf of the contract, and by interleaving borrows with repeated calls, a use …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.