mediumLogic errorEVM-Solidity
Amphor: The `_zapIn` function may unexpectedly revert due to the incorrect implementation of `_transferTokenInAndApprove`
- Payout
- $0
- Protocol
- Amphor
- Disclosed
- Mar 18, 2024
- Source
- sherlock
The Amphor VaultZapper's `_transferTokenInAndApprove` helper checks the token allowance from `_msgSender()` to the swap router, when it should check the allowance from the VaultZapper contract itself (`address(this)`). Because the check uses the wrong source o …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.