highAccess controlEVM-Solidity
Tapioca DAO: Tokens can be stolen from other users who have approved Magnetar
- Payout
- $0
- Protocol
- Tapioca DAO
- Disclosed
- Nov 16, 2023
- Source
- code4rena
A critical authorization missing in Tapioca DAO's Magnetar helper contract allows malicious actors to execute actions using allowances granted by other users. Because several function calls within MagnetarV2 and MagnetarMarketModule omit sender verification, a …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-07-tapioca-findings/issues/351
- https://github.com/code-423n4/2023-07-tapioca-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.