All reports
highAccess controlEVM-Solidity

Oku's New Order Types Contract: Failure to reset unspent approval to the target address will lead to the wiping of the smart contract balance

Payout
$0
Protocol
Oku's New Order Types Contract
Disclosed
Dec 9, 2024
Source
sherlock

Oku's automated order-fill logic approves the full order amount to an arbitrary caller-specified target contract before making a low-level call, and never resets that approval afterward. When an order is only partially consumed, the leftover allowance stays li …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.