highLogic errorEVM-Solidity
Arrakis Valantis SOT: Through rebalance(), an executor can drain 100% of vault reserves by minting cheap shares
- Payout
- $0
- Protocol
- Arrakis Valantis SOT
- Disclosed
- Jun 4, 2024
- Source
- sherlock
A malicious executor of ArrakisStandardManager can drain roughly 99% of a vault's reserves in a single rebalance transaction. Because the executor controls the payload and the router address passed to ValantisHOTModule.swap(), they can first withdraw all liqui …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.