·
We continued the Panoptic contest on Code4rena.
Lesson Summary:
- Downcasting cuts the number, watch closely for such casts
- ERC4626 and vaults check assets for zero amount, not shares
- Check the cast in the withdraw fn, can it cause a problem? - ok
- Play with numbers with all the branches in the accrueInterest fn
- Can someone call a fn which accrues interest and screw another `owner` (trigger the !isDeposit) branch to make the other owner burn his shares?
- User has enough balance
- User has not enough balance and it's not a deposit
- User does not have enough balance but it's a deposittransfer ---> deposit, basically search for ways for users to game the accrueing of interest somehow