highAccess controlEVM-Solidity
Oku's New Order Types Contract: Failure to reset unspent approval to the target address will lead to the wiping of the smart contract balance
- Payout
- $0
- Protocol
- Oku's New Order Types Contract
- Disclosed
- Dec 9, 2024
- Source
- sherlock
Oku's automated order-fill logic approves the full order amount to an arbitrary caller-specified target contract before making a low-level call, and never resets that approval afterward. When an order is only partially consumed, the leftover allowance stays li …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.