highLogic errorEVM-Solidity
LoopFi: `Flashlender.sol#flashLoan()` should use `mintProfit()` to mint fees, as the current implementation may lead to locked up WETH in PoolV3
- Payout
- $0
- Protocol
- LoopFi
- Disclosed
- Feb 17, 2025
- Source
- code4rena
LoopFi's Flashlender.flashLoan() credits flash-loan fees to PoolV3 by calling repayCreditAccount(total-fee, fee, 0) instead of mintProfit(). Both paths mint the same amount of lpETH shares to the treasury, but repayCreditAccount treats the fee as debt interest …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-07-loopfi-findings/issues/55
- https://github.com/code-423n4/2024-07-loopfi-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.