Skip to content

EntryFee and ExitFee will be stuck in the contract #85

Open
@hats-bug-reporter

Description

Github username: --
Twitter username: --
Submission hash (on-chain): 0x5cda359ae4097abe589fff9d66f0706072def990cf9f44129eab74e1bcbd60ac
Severity: high

Description:
Description
When depositing/redeeming there is an entry/exit fee that the user pays to the vault.
This fee is obtained from the user's deposit/redeem amount. So, for example if he sends 5 ETH to the contract, his deposit will be 4.5 ETH, since 0.5 will be the entry fee.

The problem is these fees are held in the contract and there is no way to withdraw them meaning they will be stuck in the contract.

Attack Scenario
Describe how the vulnerability can be exploited.

Attachments

  1. Proof of Concept (PoC) File
  1. Revised Code File (Optional)
    Implement similar functions to _transferFeesToProtocolVault for the other fees as well.

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workinginvalidThis doesn't seem right

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions