You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It seems that by being able to update the lastTotalAssets several times within a block the feeRecipient can generate instant revenu not based on interest accrual.
So it's because lastTotalAssets is missing the deposit of users after the deposit. Instead, lastTotalAssets should be synced at the end of any interaction, and read to accrue fee at the beginning of any interaction
It seems that by being able to update the lastTotalAssets several times within a block the
feeRecipient
can generate instant revenu not based on interest accrual.https://github.com/morpho-labs/morpho-blue-metamorpho/blob/ebe58aa6c8b9e9198c63c50bdc5de7d64609e81b/test/forge/FeeTest.sol#L45-L63
The text was updated successfully, but these errors were encountered: