You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In RedeemQueue.sol#L237, the batch.assets is always stored in 18 decimal precision.
However, USDC and its derivatives use only 6 decimal places.
The result is that when batches are handled, the batch.assets value will likely be greater than the liquid assets amount, therefore demand will never be incremented and the assets will not be claimable. Users will forfeit their shares and claim nothing in return
In another scenario, if there is a huge/whale amount of USDC in the vault, liquid assets could actually be greater than the batch.assets value, and users would be able to withdraw large amounts with only a small redeem request.
Immense Denim Capybara
High
Vault mishandles USDC (non 18 decimal tokens)
In RedeemQueue.sol#L237, the
batch.assetsis always stored in 18 decimal precision.However, USDC and its derivatives use only 6 decimal places.
The result is that when batches are handled, the
batch.assetsvalue will likely be greater than the liquid assets amount, therefore demand will never be incremented and the assets will not be claimable. Users will forfeit their shares and claim nothing in returnIn another scenario, if there is a huge/whale amount of USDC in the vault, liquid assets could actually be greater than the batch.assets value, and users would be able to withdraw large amounts with only a small redeem request.