AAVE Flashloan callback detector

November 1, 2023 ยท View on GitHub

Configuration

  • Check: pess-aave-flashloan-callback
  • Severity: High
  • Confidence: High

Description

It is important to validate initiator and msg.sender in executeOperation callback

Vulnerable Scenario

test scenarios

Recommendation

Validate initiator and msg.sender

Contents

  1. 1Configuration
  2. 2Description
  3. 3Vulnerable Scenario
  4. 4Recommendation