EntryFee and ExitFee will be stuck in the contract #85
Open
Description
Github username: --
Twitter username: --
Submission hash (on-chain): 0x5cda359ae4097abe589fff9d66f0706072def990cf9f44129eab74e1bcbd60ac
Severity: high
Description:
Description
When depositing/redeeming there is an entry/exit fee that the user pays to the vault.
This fee is obtained from the user's deposit/redeem amount. So, for example if he sends 5 ETH to the contract, his deposit will be 4.5 ETH, since 0.5 will be the entry fee.
The problem is these fees are held in the contract and there is no way to withdraw them meaning they will be stuck in the contract.
Attack Scenario
Describe how the vulnerability can be exploited.
Attachments
- Proof of Concept (PoC) File
- Revised Code File (Optional)
Implement similar functions to_transferFeesToProtocolVault
for the other fees as well.